How to enable verbose / debug logging on Authentication Manager, AM Web Tier v. 8.x
Article Number
Applies To
RSA Product/Service Type: Authentication Manager Web Tier
RSA Version/Condition: all 8.X
Issue
The Web Tier config.xml file is located in the <WT_Home>/server/config directory.
By default, the <WT_Home> installation path is;
/opt/RSASecurity/RSAAuthenticationManagerWebtier
or
C:\Program Files\RSA Security\RSA Authentication Manager Webtier
You should make a backup of the original version of config.xml. When done editing the config.xml for debug/verbose logging, you should make another backup of the debug version of confiog.xml, so that you can rename the config.xml to either debug or non-debug depending on your troubleshooting needs.
Tasks
1. Make a backup copy of original Web Tier config.xml file
2. edit config.xml
Locate <log> section
change <log-file-severity>Info to Debug
change <stdout-severity>Notice to Debug
Add new section title <server-debug>
3. Save config.xml
- you must restart Web Tier services to enable the changes
4. Restart Web Tier services
- syntax errors in config.xml can prevent Web Tier services from starting.
If Web Tier services start, then test debug output in the AdminServer.log
5. Make a copy of new debug config.xml for future use.
6. When done troubleshooting, optionally replace original config.xml and restart WT to turn off debug
Resolution
2. edit config.xml
See screenshots in KB Issue section above
Locate <log> section
change <log-file-severity>Info to Debug
change <stdout-severity>Notice to Debug
Add new section title <server-debug>
The <server-debug> section that you will add is below, copy and paste it for accuracy.
<server-debug>
<debug-scope>
<name>weblogic.servlet.internal</name>
<enabled>true</enabled>
</debug-scope>
<debug-scope>
<name>weblogic.servlet.internal.session</name>
<enabled>true</enabled>
</debug-scope>
<debug-scope>
<name>weblogic.servlet.logging</name>
<enabled>true</enabled>
</debug-scope>
<debug-http>true</debug-http>
<debug-url-resolution>true</debug-url-resolution>
<debug-http-sessions>true</debug-http-sessions>
<debug-http-logging>true</debug-http-logging>
<debug-web-app-module>true</debug-web-app-module>
</server-debug>
3. Save config.xml
- you must restart Web Tier services to enable the changes
4. Restart Web Tier services - See screenshots in KB Tasks section above
Notes
Note: <log> section ends with </log>. Defaults = Info, Notice. You will change those to Debug.
- you must restart Web Tier services to enable the changes
- syntax errors in config.xml can prevent Web Tier services from starting.
- both edits must be accurately made to produce debug output into the AdminServer.log files
- be sure to replace your original config.xml to disable debug when done troubleshooting
- keep a copy of the debug version of configxml for future troubleshooting
Related Articles
How to enable debug in Key Manager Server? 50Number of Views SecurID Internet / Intranet Partners 7Number of Views Compatibility with IIS plugin to enable requests to proxy from Microsoft Internet Information Services (IIS) to BEA WebLogic 7Number of Views 'Total Number of Users (Terminated)' is missing from the Role Set Analytics tab in versions 7.1.1 P06 and 7.2.0 P01 of RSA… 36Number of Views Upgrading to Authentication Manager 8.4 fails with the error message "Unable to delete file /opt/rsa/am/server/wrapper/bac… 266Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.9 Release Notes (January 2026) An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?