Multiple function filters in FWSTrace.conf for CA Access Gateway (SPS) and Web Agent Option Pack (WAOP)
search cancel

Multiple function filters in FWSTrace.conf for CA Access Gateway (SPS) and Web Agent Option Pack (WAOP)

book

Article ID: 215192

calendar_today

Updated On:

Products

SITEMINDER CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Agents (SiteMinder) CA Single Sign-On

Issue/Introduction

When running Federation Services on Web Agent Option Pack and CA Access Gateway (SPS), how to remove from the FWSTrace.log the lines with "plaintext and encoded SAML Responses"?

Trying to exclude both from logging by applying the following filter in FederationTrace.conf:

Function: !=sendSAMLResponse
Function: !=processAssertionGeneration

The result is that only one line of the two is applied.

It seems that only one filter is being taken at time, and it's the last one defined, not both.

From file FederationTrace.conf, it seems also that there's only 1 filter permitted:

# FILTERS

[...]

# For example:
#    Function: !=doGet
#    Function: ==doPost
# NOTE: Specify only one filter on a line.

Resolution

Out of the box, only 1 filter at a time is configurable.

Open an Enhancement Request to get the product to handle 2 or more filters at a time (1).

Additional Information