Security event logging

Security events on a service integration bus are logged as audit or error records in the SystemOut.log file for the bus.

IBM recommends using the High Performance Extensible Logging (HPEL) log and trace infrastructure . We view HPEL log and trace information using the logViewer .

A security event is the outcome of an attempt by a connecting client application to authenticate to a bus. There are two possible outcomes: authentication success, and authentication failure. Success is logged as an audit record, and failure as an error record. We can control the type and number of audit and error records logged for a bus by configuring a custom property for the bus, in the administrative console. The property is a name-value pair called audit.bus.authentication that can have one of the following three string values:

all

Audit every attempt to authenticate to the bus.

failure

Audit only failure to authenticate to the bus.

none

Do not audit any attempt to authenticate to the bus.

Related:

Loggers

Configure bus properties

Use High Performance Extensible Logging to troubleshoot applications