Audits and logs
For security, troubleshooting, and regulatory compliance, agents are able to audit information for allowed and/or denied requests.
The agent audit logging service adheres to the log structure common across the ForgeRock Identity Platform. For information, see Auditing.
Java Agent supports propagation of the transaction ID across the ForgeRock Identity Platform,
using the HTTP header
configuring this header to prevent malicious actors from flooding the system with
requests using the same transaction ID header to hide their tracks. For
Configuring the trust transaction header system property
in AM’s Security guide.
Agent logs can contain informational, error, and warning events, to troubleshoot and debug transactions and events that take place within the agent instance.
Protect logs from unauthorised access, and make sure they contain a minimum of sensitive or personally identifiable information that could be used in attacks.
Use the lowest level of logging necessary. For example, consider logging at the
WARNING level, instead of
For more information, see
logging configuration properties.