How to enable verbose / debug logging on Authentication Manager, AM Web Tier v. 8.x
Article Number
Applies To
RSA Product/Service Type: Authentication Manager Web Tier
RSA Version/Condition: all 8.X
Issue
The Web Tier config.xml file is located in the <WT_Home>/server/config directory.
By default, the <WT_Home> installation path is;
/opt/RSASecurity/RSAAuthenticationManagerWebtier
or
C:\Program Files\RSA Security\RSA Authentication Manager Webtier
You should make a backup of the original version of config.xml. When done editing the config.xml for debug/verbose logging, you should make another backup of the debug version of confiog.xml, so that you can rename the config.xml to either debug or non-debug depending on your troubleshooting needs.
Tasks
1. Make a backup copy of original Web Tier config.xml file
2. edit config.xml
Locate <log> section
change <log-file-severity>Info to Debug
change <stdout-severity>Notice to Debug
Add new section title <server-debug>
3. Save config.xml
- you must restart Web Tier services to enable the changes
4. Restart Web Tier services
- syntax errors in config.xml can prevent Web Tier services from starting.
If Web Tier services start, then test debug output in the AdminServer.log
5. Make a copy of new debug config.xml for future use.
6. When done troubleshooting, optionally replace original config.xml and restart WT to turn off debug
Resolution
2. edit config.xml
See screenshots in KB Issue section above
Locate <log> section
change <log-file-severity>Info to Debug
change <stdout-severity>Notice to Debug
Add new section title <server-debug>
The <server-debug> section that you will add is below, copy and paste it for accuracy.
<server-debug>
<debug-scope>
<name>weblogic.servlet.internal</name>
<enabled>true</enabled>
</debug-scope>
<debug-scope>
<name>weblogic.servlet.internal.session</name>
<enabled>true</enabled>
</debug-scope>
<debug-scope>
<name>weblogic.servlet.logging</name>
<enabled>true</enabled>
</debug-scope>
<debug-http>true</debug-http>
<debug-url-resolution>true</debug-url-resolution>
<debug-http-sessions>true</debug-http-sessions>
<debug-http-logging>true</debug-http-logging>
<debug-web-app-module>true</debug-web-app-module>
</server-debug>
3. Save config.xml
- you must restart Web Tier services to enable the changes
4. Restart Web Tier services - See screenshots in KB Tasks section above
Notes
Note: <log> section ends with </log>. Defaults = Info, Notice. You will change those to Debug.
- you must restart Web Tier services to enable the changes
- syntax errors in config.xml can prevent Web Tier services from starting.
- both edits must be accurately made to produce debug output into the AdminServer.log files
- be sure to replace your original config.xml to disable debug when done troubleshooting
- keep a copy of the debug version of configxml for future troubleshooting
Related Articles
Upgrading to Authentication Manager 8.4 fails with the error message "Unable to delete file /opt/rsa/am/server/wrapper/bac… 319Number of Views What is 'AFX fulfillment state V' that is sometimes seen in the AFX log in RSA Identity Governance & Lifecycle? 274Number of Views Security Scanners Are Still Detecting CVE-2022-23302 Vulnerability in the AM Server Even After Upgrading to v8.6 Patch 3 77Number of Views Character string buffer too small when access view V_AV_DB_TIMEZONE in RSA Identity Governance and Lifecycle 69Number of Views Network Configuration Loss in SUSE Linux During RSA Authentication Manager 8.x Live Migration on Hyper-V 429Number of Views
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory Mandatory Certificate Upgrade Required by 6th October 2025 for RSA MFA Agent for PAM, RSA MFA Agent for Apache, and Third … RSA Authentication Manager 8.9 Release Notes (January 2026)
Don't see what you're looking for?