SAP Cloud Logging
An instance-based observability service built on OpenSearch that stores and analyses logs, metrics and traces from Cloud Foundry, Kyma, Kubernetes and other runtime environments.
Logs, metrics and traces from SAP BTP workloads go into an OpenSearch-based instance of SAP Cloud Logging through an OpenTelemetry format API, through a JSON format API, or as the application and request logs Cloud Foundry emits. The data is kept for a configurable retention period, which size-based curation overrules when the disk runs full. For SAP BTP, Cloud Foundry RuntimeSAP BTP, Cloud Foundry RuntimeThe Cloud Foundry runtime of SAP BTP: memory for applications in a Cloud Foundry org, run from SAP's Java, Node.js and Python buildpacks or community buildpacks and managed with the standard Cloud Foundry tools.sap official, btp and SAP BTP, Kyma runtimeSAP BTP, Kyma runtimeA fully managed Kubernetes runtime on SAP BTP, based on the open-source project Kyma, where extensions to SAP solutions run as containerised microservices and serverless Functions.sap official, btp it ships predefined content for the load, latency and error rates of an application's requests; custom dashboards and notifications are built in its web UI. Users and group-based access are managed with SAP Identity Authentication Service.
Where it sits
Who is behind it
In the atlas: maintains 137, wrote 14@SAPmaintainer
What it declares
Every artifact
- Type
- Service
- Origin
- By SAP
As a service
- Plans
- 4
- Regions
- 42
- Support component
- BC-CP-CLS
Connections
Seeing what a running service did, in a readable form
Traces, metrics and correlation for a running service
OpenTelemetry instrumentation for CAP services
UI5 frontend performance and error capture for CAP
Read-only query tool for metrics in SAP Cloud Logging
Read-only query tool for OpenTelemetry spans in SAP Cloud Logging
TechEd 2025 workshop monitoring a BTP app with SAP Cloud ALM
TechEd 2025 session on Day-2 operations for SAP BTP, Kyma runtime
TechEd 2025 workshop on Day-2 operations for a CAP app on CF
Download
Learn more
- How to Access SAP Cloud Logging Service Dashboards Using IAS SAML AuthenticationHow to Access SAP Cloud Logging Service Dashboards Using IAS SAML AuthenticationWalks through wiring SAML 2.0 single sign-on between SAP Cloud Identity Services (IAS) and SAP Cloud Logging so its OpenSearch dashboards accept IAS logins instead of a service key: creating the SAML application in IAS, editing the instance's saml parameters (admin_group, idp.metadata_url, idp.entity_id, sp.entity_id), setting the matching entity ID and endpoints on the IAS side, and mapping an IAS group to the all_access role through a groups attribute. It also shows how to read a 403 on the dashboard as SAML login succeeding while the group-to-role mapping is still missing.Umezuki, published 2025-12-30Umezuki, SAP Community
- Authorization management with OpenSearch's Document Level Security - SAP Cloud LoggingAuthorization management with OpenSearch's Document Level Security - SAP Cloud LoggingWhere the predecessor SAP Application Logging service reused CF space permissions for read-only access, SAP Cloud Logging integrates with SAP Cloud Identity Services (IAS) and controls per-document visibility through OpenSearch's Document Level Security: an IAS group becomes a backend role, mapped to an OpenSearch role that carries a DLS query filter, so a search request only ever returns documents whose indexed field (space_name, organization_id, or another keyword field) matches what that role's filter allows. It walks through fixed per-space roles, a shared multi-space role using a terms query, and a single dynamic role that substitutes ${user.roles} into the filter so the match is against the caller's own groups, then lists operational pitfalls — wildcard index patterns breaking Dashboards, DLS roles that also hold write access creating log entries nobody can read back, and match queries against a .keyword field being non-deterministic where term queries are exact.Hariharan-Gandhi, published 2025-11-24Hariharan-Gandhi, SAP Community
- SAP API ManagementのアクセスログをSAP Cloud Loggingで可視化する方法SAP API ManagementのアクセスログをSAP Cloud Loggingで可視化する方法In Japanese. API Management's own screens show call counts but not the individual request log — no audit trail, no header or IP detail, which leaves auth failures hard to diagnose. The author's fix is an API Policy that builds a structured log entry with AssignMessage and forwards it through a syslog drain to SAP Cloud Logging, and confirms the ingest endpoint works by PUTting a test message to it directly with Postman before wiring the policy.yasuyukiuno, published 2025-09-24yasuyukiuno, SAP Community
6 more
- Instance Sharing - SAP Cloud LoggingInstance Sharing - SAP Cloud LoggingExplains how to share one SAP Cloud Logging instance across Cloud Foundry spaces, subaccounts and regions instead of provisioning one per space, contrasting built-in platform sharing, where credentials are transferred automatically but the scope stays narrow, within a single subaccount in the post's own example, with reusing a service key through a Cloud Foundry User-Provided Service, which applies across regions, subaccounts and environments but leaves credential transport and rotation to the customer. Walks through a cf share-service example and the cost, legal and ingestion-throughput tradeoffs against dedicated instances.Hariharan-Gandhi, published 2025-08-13Hariharan-Gandhi, SAP Community
- From Application Logging to Cloud Logging: Service Innovation GuideFrom Application Logging to Cloud Logging: Service Innovation GuideSAP Cloud Logging replaces SAP Application Logging service, moving each customer from a shared multitenant stack to a dedicated, fully isolated one, and this guide sets out what changes with the move: a deployment per compliance region instead of per Cloud Foundry landscape, SAML/IDP-based authentication instead of Cloud Foundry-bound auth, retention that is configurable instead of fixed at seven days, and hourly capacity-unit pricing instead of fixed-size monthly plans. It also states the deprecation timeline for logging on BTP: SAP Application Logging closes to new or renewed CPEA contracts after 2025-07-31, while contracts signed before that date keep their entitlement until their next renewal.Hariharan-Gandhi, published 2024-11-22Hariharan-Gandhi, SAP Community
- Kyma Integration with SAP Cloud Logging. Part 2: Let's ship some tracesKyma Integration with SAP Cloud Logging. Part 2: Let's ship some tracesWalks through shipping traces from SAP BTP, Kyma runtime to SAP Cloud Logging: a Kyma TracePipeline resource pointed at the service binding's OTLP endpoint, an Istio Telemetry resource that sets the mesh-wide sampling percentage, and Cloud Logging's Trace Analytics view to filter the resulting spans by service name or request ID. For a multitenant JavaScript CAP application it instruments with @cap-js/telemetry, naming the npm packages to add, and covers Cloud Native Buildpacks and manual Istio header propagation for services outside CAP.gabbi, published 2024-04-19gabbi, SAP Community
- AI-assisted operations: SAP Cloud ALM and SAP Cloud Logging in actionAI-assisted operations: SAP Cloud ALM and SAP Cloud Logging in actionSAP Cloud Logging in an operations loop for the SAP Business AI Platform, with SAP Cloud ALM: the abstract assigns detecting a problem to Cloud ALM, supporting its resolution to AI, and the deeper analysis to Cloud Logging, and names the loop as automated detection, alerting and AI-guided troubleshooting with a person deciding, which is what operations automation covers. Which AI, and what it may do without that person, the abstract does not say. A TechEd 2026 session (Wednesday 28 October, Berlin), presented by Stephanie Jerch and Thorsten Sandfuchs, written here from SAP's abstract; the recording is not yet published.Thorsten Sandfuchs, SAP TechEd — session catalogue
- Deploy, review, break, fix: Govern cloud transports with agility and AIDeploy, review, break, fix: Govern cloud transports with agility and AIFive BTP services in one delivery chain, as the abstract lays it out: a transport is triggered in SAP Content Agent Service, tested in SAP Cloud Transport Management, its failure is raised by SAP Alert Notification service for SAP BTP and remediated by a SAP Joule agent with SAP Automation Pilot, and SAP Cloud Logging keeps the history for root-cause analysis. The chain from alert to remediation is the operations automation concern; what the Joule agent decides on its own is not in the abstract. A TechEd 2026 session (Thursday 29 October, Berlin), presented by Biser Simeonov, Daniel Funkert, Sven Rullmann and Thorsten Sandfuchs, written here from SAP's abstract; the recording is not yet published.Thorsten Sandfuchs, SAP TechEd — session catalogue
- What’s next for the core platform capabilities of SAP Business AI PlatformWhat’s next for the core platform capabilities of SAP Business AI PlatformA preview of the operations layer beneath SAP Business AI Platform: selected road map highlights across Joule Studio runtime, Cloud Identity Services and SAP Cloud Logging, on how enterprise AI is governed and run. The edges are to the two named services and to SAP Joule, whose agents the Joule Studio runtime runs; the abstract names the three areas and no highlight. A TechEd 2026 session (Tuesday 27 October, Berlin; also XP825V, virtual), presented by Andre Lamego and Jens Huesken, written here from SAP's abstract; the recording is not yet published.SAP TechEd — session catalogue
What’s New
from SAP Help Portal, readDocumentation for the span_passthrough parameter
OpenSearch and OpenSearch Dashboards update to version 2.19.6
Improved OTel Attribute Mapping for Exceptions
backend.min_data_nodes service configuration parameter
OpenSearch and OpenSearch Dashboards update to version 2.19.5
OIDC URL Validation During Instance Creation
Debugging Guide for Ingestion Errors
Start Time Column for Istio Logs
GenAI Dashboard preview
OIDC support
Standard Ingest component can now be disabled
Fix binding delays
New regions available
OpenTelemetry Trace Span Ingestion Enhancement
OpenSearch and OpenSearch Dashboards update to version 2.19.4
Configuration setting: storeInSessionStorage Disabled
cls-rejected-* Indices Retention Cap
Enhanced Ingestion Scale-Out for Load Bursts
Default zstd Compression for OpenSearch Indexes
Default zstd Compression for OpenSearch Indexes
Update of underlying OpenSearch to version 2.19 reaches final adoption state
Removed saml.exchange_key configuration setting
Improved Error Handling for Overloaded Development Plans
New regions available
Expanded Drill-Down for Cloud Foundry Dashboards
Enhanced Cloud Foundry Latency Dashboard
Enhanced Cloud Foundry errors dashboard
Update to: Improvement of the overall stability of Cloud Logging's OpenSearch clusters by proper OpenTelemetry index sizing.
Enhanced Log Shipment Throughput and Reliability in Cloud Foundry
Enhanced Cloud Foundry Metrics Dashboard Sorting
Ingest Configuration Supports min_instances Parameter
Numerical Interpretation of HTTP Status Codes for Range Queries
Fixed traceID link in the OpenTelemetry index patterns for instances using OpenSearch 2.x ("explore" phase)
OpenSearch and OpenSearch Dashboards update to version 2.19.3 for instances in "explore" phase
Array based stacktraces in the field stacktrace will now be displayed correctly
New regions available
Cloud Logging service now supports ingestion and visualization of SAP BTP, Cloud Foundry Runtime Container metrics.
Availability of OpenSearch 2.19
New regions available
Upcoming OpenSearch Stack Update
Support for Monitoring Security Recommendations
Loading of Existing Configuration during Instance Update
Update to: Improvement of the overall stability of Cloud Logging's OpenSearch clusters by proper index sizing.
Cloud Logging service is available on sa31
Cloud Logging service is available on US11
OpenSearch and OpenSearch Dashboards is updated to 1.3.20
Update: "CF Requests and Logs" dashboard shows trace_id and span_id columns
Improvement of the overall stability of Cloud Logging's OpenSearch clusters by proper index sizing.
New "Service" Dashboard
Cloud Logging service is now available in IL30
Update OpenSearch and OpenSearch Dashboards to 1.3.19
Dev Plan update
New Updates
Update OpenSearch
Update OpenSearch
OpenTelemetry updates
Updates
Time precision change
Several changes to make Cloud Logging more efficient
OpenSearch has been updated
New service
Others providing
- SAP Application Logging service for SAP BTPSAP Application Logging service for SAP BTPCollects an application's log lines from Cloud Foundry or Kyma into a searchable Kibana, for the retention the plan sets.sap official, btpCollects Cloud Foundry or Kyma logs into a searchable Kibana
- @saptools/cf-logs@saptools/cf-logsA command line and typed Node.js library that fetches and streams the logs of one Cloud Foundry app and parses them into structured rows.independent, btpLog fetcher and parser for one Cloud Foundry app
- @saptools/cf-tail@saptools/cf-tailA command line that tails every started app in a Cloud Foundry space at once and merges their logs into one timeline by timestamp, with filters by level, tenant, router status and time window.independent, btpMerged log tail of every started app in a Cloud Foundry space
- Agent Activation for Dynatrace Service for SAP BTPAgent Activation for Dynatrace Service for SAP BTPInjects the Dynatrace agent into Java applications on SAP BTP, so their metrics, events and end-to-end traces go to a Dynatrace SaaS monitoring environment the customer already runs.sap official, btpInjects the Dynatrace agent into Java applications on SAP BTP
- SAP Monitoring Service for SAP BTPSAP Monitoring Service for SAP BTPMetrics, availability and JMX checks, and email or webhook alerts for Java, HTML5 and SAP HANA XS applications and database systems, in Neo regions of SAP BTP.sap official, btpMetrics, availability checks and alerts for apps in Neo regions
- @sap/e2e-trace@sap/e2e-traceSAP Passport handling for a Node.js component: it reads the identifiers a request arrives with, updates them for the next system, and writes a statistics record per request to standard output.sap official, btpSAP Passport handling for Node.js components
- @saptools/cf-metrics@saptools/cf-metricsA read-only command line that queries the container and OpenTelemetry metrics SAP Cloud Logging has ingested for Cloud Foundry apps, as history over a time range, a ranking across apps or a live watch.independent, btpRead-only query tool for metrics in SAP Cloud Logging
- @saptools/cf-otel@saptools/cf-otelA read-only command line that queries the OpenTelemetry trace spans SAP Cloud Logging has already ingested and ranks the spans of a trace by self-time.independent, btpRead-only query tool for OpenTelemetry spans in SAP Cloud Logging
Details
Sources
Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.
Compatibility and provenance
History in the atlas
- First seen.
For your agent
- Ref
artifact:btp-cloud-logging- JSON
- /artifacts/btp-cloud-logging.json
- MCP
- Connecting an agent