{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41434,"path":"platform-security/instance-security-hardening-settings/sc-error-handling-logging.md","title":"Error handling and logging","bundle":null,"doc_type":null,"release":"australia","body":"\n# Error handling and logging\n\nThe error handling and logging category addresses the quality and verbosity of logged information exposed to stakeholders.\n\nThis includes ensuring logs and error messages do not collect sensitive information, correctly protect data according to classification and have an appropriate lifetime. Additionally, this category relates to appropriate error handling and not revealing sensitive errors to end users, such as verbose stack traces for unhandled exceptions with security implications.\n\n-   **[Disable logger for low privilege users in script sandbox](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-glide-security-logger-no-loggining-for-sandbox.md)**  \nManage Glide System's ability to log scripts being executed in the sandbox environment.\n-   **[Disable secure cookie debugging](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-disable-secure-cookie-debugging.md)**  \nManage the log messages related to cookies in your instance.\n-   **[Disable SQL error messages](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-disabling-sql-error-messages.md)**  \nUse the **glide.db.loguser** property to disable SQL error messages from rendering in a browser.\n-   **[Enable Identity and Access Audit Tool](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-identity-and-access-audit-tool.md)**  \nUse Identity and Access Audit to track changes to user accounts, groups, and roles.\n-   **[Enable MID audit log](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-mid-audit-log-plugin-applicability-mid-server.md)**  \nThe MID Server command audit log records details such as the command name, command hash, name of credential used, and execution status.\n-   **[Enable protected tables plugin](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-enable-protected-tables-plugin.md)**  \nUse the **com.glide.security.protected\\_table.enabled** property to prevent higher privilege users from tampering with log tables.\n-   **[Log all outbound http request fields \\[Removed in Security Center v1.3.2\\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-log-all-outbound-http-request-fields.md)**  \nConfigure the **glide.outbound\\_http.security.log.allow.all.fields** property to false to prevent sensitive Outbound HTTP fields from being logged in plain text.\n-   **[Log html sanitization \\[Removed in Security Center 2.0\\]](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-log-html-sanitization.md)**  \nConfigure **glide.html\\_sanitize.discarded\\_log.enable** property to determine if HTML sanitization events will be logged in your instance.\n-   **[Log Impersonation History](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-log-impersonation-history.md)**  \nEnable impersonation history logging using a system property.\n-   **[Log session audit events](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-log-session-audit-events.md)**  \nUse a system property to enable creations of session audit events\n-   **[Log user impersonation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-log-user-impersonation.md)**  \nConfigure **glide.sys.log\\_impersonation** to control if user-impersonating events are logged in your instance.\n-   **[Prevent verbose HTTP request logging](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-prevent-verbose-http-request-logging.md)**  \nHelp prevent access to sensitive information by reducing verbose HTTP request logging.\n-   **[Track Impersonation Events](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-track-impersonation-events.md)**  \nEnable impersonation event tracking using a system property.\n-   **[Turn off verbose SQL error messages for import processor](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-turn-off-verbose-sql-error-messages-for-import-processor.md)**  \nConfigure this property to control whether verbose SQL error messages are displayed.\n\n**Parent Topic:**[Hardening settings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/security-hardening-settings.md)\n\n"}}