---
name: secrets-manager-logging
title: Logging for Secrets Manager
description: IBM Cloud services, such as Secrets Manager, generate platform logs that you can use to investigate abnormal activity and critical actions in your account, and troubleshoot problems.
last-updated: 2026-09-01
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/secrets-manager?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Logging for Secrets Manager
{: #logging}

IBM Cloud services, such as Secrets Manager, generate platform logs that you can use to investigate abnormal activity and critical actions in your account, and troubleshoot problems.
{: shortdesc}

You can use IBM Cloud Logs Routing, a platform service, to route platform logs in your account to a destination of your choice by configuring a tenant that defines where platform logs are sent. For more information, see [About Logs Routing](https://cloud.ibm.com/docs/logs-router?topic=logs-router-about&format=markdown).

You can use IBM Cloud Logs to visualize and alert on platform logs that are generated in your account and routed by IBM Cloud Logs Routing to an IBM Cloud Logs instance.

## Locations where platform logs are sent
{: #logging-locations}

Secrets Manager sends platform logs to IBM Cloud Logs in the regions that are indicated in the following tables.

### Trial and Standard plans
{: #logging-locations-standard}

| Dallas (`us-south`) | Washington (`us-east`)  | Toronto (`ca-tor`) | Montreal (`ca-mon`) | Sao Paulo (`br-sao`) |
|---------------------|-------------------------|-------------------|----------------------|----------------------|
| [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} |
{: caption="Regions where platform logs are sent in Americas locations for Trial and Standard plans" caption-side="bottom"}
{: #logging-table-1}
{: tab-title="Americas"}
{: tab-group="logging-standard"}
{: class="simple-tab-table"}
{: row-headers}

| Tokyo (`jp-tok`)    | Sydney (`au-syd`) |  Osaka (`jp-osa`) | Chennai - Airtel (`in-che`) | Mumbai - Airtel (`in-mum`) |
|---------------------|------------------|------------------|--------------------|-------------------|
| [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} |
{: caption="Regions where platform logs are sent in Asia Pacific locations for Trial and Standard plans" caption-side="bottom"}
{: #logging-table-2}
{: tab-title="Asia Pacific"}
{: tab-group="logging-standard"}
{: class="simple-tab-table"}
{: row-headers}

| Frankfurt (`eu-de`)  | London (`eu-gb`) | Madrid (`eu-es`) |
|---------------------------------------------------------------|---------------------|------------------|
| [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} |
{: caption="Regions where platform logs are sent in Europe locations for Trial and Standard plans" caption-side="bottom"}
{: #logging-table-3}
{: tab-title="Europe"}
{: tab-group="logging-standard"}
{: class="simple-tab-table"}
{: row-headers}

### Vault Dedicated plan
{: #logging-locations-vault-dedicated}

| Dallas (`us-south`) | Frankfurt (`eu-de`) | Paris (`eu-fr2`) |
|---------------------|---------------------|------------------|
| [Yes]{: tag-green} | [Yes]{: tag-green} | [Yes]{: tag-green} |
{: caption="Regions where platform logs are sent for Vault Dedicated plan" caption-side="bottom"}

## Before you begin
{: #before-logs}

If you're working with IBM Cloud Logs for the first time, be sure that you create an instance in the same location as your Secrets Manager instance. For more information, see [Configuring platform logs through the Observability dashboard](https://cloud.ibm.com/docs/cloud-logs?topic=cloud-logs-observe&interface=ui&format=markdown).

## Viewing logs
{: #view-logs-ui}

Logs that are generated by a Secrets Manager service instance are forwarded automatically to the IBM Cloud Logs instance that is available in the same location.

Only the following logs are being forwarded: All logs with the `ERROR` log level, and the `INFO`-level log for [Secrets Manager event notifications](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-event-notifications&interface=ui&format=markdown#event-notifications-list).
{: note}
  
To view Secrets Manager logs, complete the following steps:

1. Log in to the IBM Cloud console.
2. Go to **IBM Cloud > Observability** to access your [Observability dashboard](https://cloud.ibm.com/observability/overview){: external}.
3. From the navigation menu, click **Logging**.
4. Select an IBM Cloud Logs instance, and click **Open Dashboard**.

    Don't have an IBM Cloud Logs instance? [Provision an instance](https://cloud.ibm.com/docs/cloud-logs?topic=cloud-logs-instance-provision&interface=ui&format=markdown) in the same location as your Secrets Manager instance. Then, click **Configure platform logs** to receive logs from supported services in your account.
5. In the logging UI, filter by `secrets-manager` to view logs that are generated by Secrets Manager.

    For more information about searching and filtering logs, check out the [IBM Cloud Logs documentation](https://cloud.ibm.com/docs/cloud-logs?topic=cloud-logs-query-data-filter&interface=ui&format=markdown).


## Analyzing logs
{: #analyze-logs-ui}

You can create views and alerts from your Secrets Manager instances, or from a specific instance. To target a specific instance, replace `host:secrets-manager` with `app:{INSTANCE_CRN}`.

### Query for finding all errors from all instances
{: #query-all-logs}

Run the following query to find all errors in your instances.

```sh
host:secrets-manager
```

### Query for finding all errors from a specific instance
{: #query-instance-logs}

Run the following query to find all errors from a specific instance.

```sh
app:crn:v1:bluemix:public:secrets-manager:au-syd:a/9add8f16c5a24a6ea8ce5d8b89b15b28:ee536f33-48ce-4125-ae4a-37b46cdc802d::
```

To learn more about creating [Managing custom views](https://cloud.ibm.com/docs/cloud-logs?topic=cloud-logs-custom_views&interface=ui&format=markdown), see the IBM Cloud Logs documentation.
{: note}