Log all outbound http request fields \[Removed in Security Center v1.3.2\]

reference australia Updated Sep 10, 2026 1 min read sc-log-all-outbound-http-request-fields.md
Raw file servicenow.com

Configure the glide.outbound_http.security.log.allow.all.fields property to false to prevent sensitive Outbound HTTP fields from being logged in plain text.

If this property is not set to the recommended value of false, sensitive Outbound HTTP fields might be logged in plaintext. This can decrease the security posture of your enterprise network because outbound requests with sensitive data and credentials can be logged in plaintext which is unencrypted, and can be viewed by lower-privileged users.

More information

Attribute

Description

Configuration name

glide.outbound_http.security.log.allow.all.fields

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

false

Default value

false

Category

Error handling and logging

Security risk

  • Severity score: 6.8
  • CVSS score: Medium
  • Security risk details: Not setting this property to false increases the chance of sensitive outbound fields being logged in plaintext which is a security risk.

Dependencies and prerequisites

None

**Parent Topic:**[Error handling and logging](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-error-handling-logging.md)
Search documentation
Search document titles and file paths on the australia branch