How to remove SMSESSION logging in Apache access.log and IIS logs ?

Document ID : KB000010292
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

When using Siteminder Web Agent with cookie provider you might see sometimes the SMSESSION logged in the Apache access.log or in the IIS logs.

For example :

10.10.10.1 - - [05/Oct/2016:00:54:05 -0400] "GET /SmMakeCookie.ccc?SMSESSION=-SM-TxZXNoId8wmeOPkJYggcxaWPkxAi9zF7CzvSTLFCl3BwIx9brQoFb3w4MsrutjHnMck3bL4kcGN8MrHWTfaALSUrfPc0dWLHh0sH5U0LuBqgPl6VUw0%2bEVr%2bCArDM%2bO6jEcI%2f75xWCHCKRpEqblTawUzb7Q5FeYi9NYYN0WNR6CoiuwR%2fuTn1Xc63uhhgPu0dUKq9jE91BdV9MyTYNr2Bs0EYNX9MbngLV8%2beVS0m9kkVoxmQ8i7CPF8Rvo1hUFHoI5dBORAYtZS7bjFf0gzcOE1sVYuGJZrLCQYpNFRyaHK4Lez2XLLp%2ffwlYsexAEUPjBw%2fbr5nl4rOlXRxUWb7L5LXrVFik8CXFb8MdqWGIyv8vxmfaXmz2sl6sfD0f0jiFHrIUTnW%2bqsgv05gp5PQrZ5c9n0otUDWhK6maHK%2f8oxkAGPjhNYCmISa7yGaxGK6%2bqBc0dNxxi46HWyIcG9zruND4RyTfY2dTLjJbElIHyubXUwUHXN1gGSxprxdB6IVNgaNPuD4zO9QAoidVh%2b6NoDG1erGR5dV9LHtf75O3Z%2b2Lbvi0kM6sw33tB2fgRIipPusMXVvxIb0SzRM%2fbwR3ZuwmxS5OhNNopONWKPd7E1mGS5OTr8Z2QvMu06dZeUtksyzTG1H%2fOMseGXJvkiYXEguFbd9mWSlK0vZwxO6K%2feEWLr93inV308LuzouzznpqXbI97AVORwYgSq2OsH6Iy9aY2K3dZNXKPYENEFUv%2bHEuGvGFC4zGIy5r82cdxsmBCusuf60nOUdVxvr38j0C1mcqu7%2bs2PR4mBh2KC2bbVNyXujLd3%2b6vA8qTwbk2AzVvgJyQYUQvrnNGl%2bQXZASWjq%2bBG179Owyv8mLBURxvKBJ2ULYMlOjMcuw1I3iZLNfuAO5hXIpPyXJ%2feXYPeKbqm6C0zwZactkz7JJWTaW0x2DzOXNLkynKTAoA57J54hmK4e3mkNd532yGc5ldEj8yLvq1R7ccmDieti0kOxmUvJwPirMrT4R%2bfvRoeeXrNyTV%2fqsyXHP3uPm83xcibnn7qRqd5bq2n&PERSIST=0&TARGET=-SM-HTTP%3a%2f%2fmyserver%2eca%2ecom%2ftest2%2ftest%2ehtml HTTP/1.1" 302 228

Environment:
Web Agent R12.52 SP1 CR06
Instructions:

This functionality will be removed officially in a future release. Dev fix is available for R12.52 SP1 CR06 if you need to remove it from the logs.

After Fix, the logs will look like :

10.10.10.1 - - [05/Oct/2016:03:22:01 -0400] "GET /SmMakeCookie.ccc?SMSESSION=data_suppressed&PERSIST=0&TARGET=-SM-HTTP%3a%2f%2fmyserver%2eca%2ecom%2ftest2%2ftest%2ehtml HTTP/1.1" 302 228