Log session audit events

reference brazil Updated Sep 10, 2026 1 min read sc-log-session-audit-events.md
Raw file servicenow.com

Use a system property to enable creations of session audit events

When the glide.authenticate.session_access.log_audit_event system property is set to true, session audit events are created in the sys_session_access_audit table. Information logged will include user, session ID (non-sensitive), IP address, roles, and policies.

Ensure the that the property glide.authenticate.session_access.log_audit_event is set to true.

Important: The glide.authenticate.session_access.log_audit_event system property is specific to Zero trust access. For more information, see Zero Trust Access (ZTA).

More information

Attribute

Description

Configuration name

glide.authenticate.session_access.log_audit_event

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

true

Fallback value

true

Category

Error handling and logging

Security risk

  • Severity score: 6.3
  • CVSS score: Medium
  • Security risk details: Information about who accessed a session will not be logged to assist in incident investigations.

Dependencies and prerequisites

None

**Parent Topic:**[Error handling and logging](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-error-handling-logging.md)
Search documentation
Search document titles and file paths on the brazil branch