{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40931,"path":"platform-security/cs-logs.md","title":"Troubleshooting and accessing logs","bundle":null,"doc_type":null,"release":"australia","body":"\n# Troubleshooting and accessing logs\n\nAccess various logs to troubleshoot and identify the failure reasons.\n\n## Code Signing logs\n\nIf any of the ECC queue records is not signed by the Code Signing Tracker API, the unsigned messages and the required details are displayed in the Code Signing module. Navigate to **System Logs** > **System Log** > **Code Signing** to access the list of records that are not trusted.\n\n\\[Omitted image \"CS-logs.png\"\\] Alt text: CS Logs\n\nFor additional debug node logs, enable **com.glide.codesigning.tracking.debug** and set its value to `true`.\n\n## REST message signature validation failure on MID Server\n\nAccess the error message regarding to the signature validation failure, by navigating to **System Web Services** > **Outbound** > **REST Message** and opening the required REST message record.\n\n\\[Omitted image \"CS-REST-logs.png\"\\] Alt text: REST message signature validation failure.\n\n**Note:** Error messages related to the ECC firewall rejections start with `ECC message execution denied`.\n\n\\[Omitted image \"CS-ECC.png\"\\] Alt text: ECC queue input when signature validation fails.\n\n\\[Omitted image \"CS-ECC2.png\"\\] Alt text: Error message when the ECC message is blocked.\n\n## JDBC probe\n\nWhen a JDBC data source with an invalid or missing signature is executed on a MID Server, an error message with the required details is displayed.\n\n\\[Omitted image \"CS-JDBC.png\"\\] Alt text: JDBC probe error message.\n\n**Source** also displays the details of the error message.\n\n\\[Omitted image \"CS-JDBC2.png\"\\] Alt text: Error details in Source.\n\n## MID Server logs\n\nTo enable the detailed ECC firewall logging, increase the log level by setting the value of the MID Server configuration parameter, **mid.log.level**, to `TRACE`. The detailed logs provide information about:\n\n-   Rules that the MID Server loaded from the boot configuration file.\n-   Granular execution trace of rules.\n-   Specific rule due to which an ECC message is to be accepted or rejected.\n\n**Note:** If `boot-config.xml` is invalid, the MID Server fails to start and the failure details are logged in the MID agent logs.\n\n**Parent Topic:**[Code Signing reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/code-signing-reference.md)\n\n"}}