You are here:
Select Enable Lightning Logger Events Control
Captures detailed client-side JavaScript errors, performance metrics, and custom logging events from Lightning Web Components (LWCs) and Aura components.
Control Name
Event Monitoring Settings (Select 'Enable Lightning Logger Events')
Control Overview
Captures detailed client-side JavaScript errors, performance metrics, and custom logging events from Lightning Web Components (LWCs) and Aura components, providing visibility into frontend application behavior and failures.
Description
When enabled, Lightning Logger records browser console.log() calls, unhandled exceptions, network failures, and LWC lifecycle events to Event Log Files; essential for diagnosing UI issues affecting security controls or user workflows.
Recommended Configuration
On the Event Monitoring Settings Setup page, turn on Enable Lightning
Logger Events. Developers add lightning__Logger
module to LWCs and set log levels (ERROR, WARN, INFO, DEBUG) via component
configuration.
Security Impact
Reveals client-side attacks (XSS, DOM manipulation), broken security controls in custom UIs, and authentication failures invisible to server-side logging alone.
Business Impact
Accelerates troubleshooting of Lightning Experience issues, improves application reliability, and reduces support tickets from UI failures blocking critical workflows.
Security Risk If Not Configured
Disabled logging for Lightning component events in the UI creates blind spots for client-side attacks and application failures.
Threat Scenarios
Malicious JavaScript injection, broken MFA prompts, custom component privilege escalation vulnerabilities, and DOM-based XSS operate without server-side detection; users experience silent failures masking security control bypasses.
Estimated CVSS Score Range
Critical (9.0–10.0).
Risk Impact Considerations
Essential for custom Lightning apps, Experience Cloud portals, or CPQ/Service Cloud Console; minimal overhead but high diagnostic value.
Higher Risk When
Heavy custom LWC/Aura development, external Experience Cloud users, embedded Salesforce in iframes/portals, or complex Console apps with security workflows.
Low Risk When
Pure Classic Experience, no custom components, internal users only with Lightning disabled.
Business and Integration Considerations
Storage impact minimal (<1% of total ELFs); integrate with Error Logging for automated alerting on critical failures.
Security Health Review Guidance
Must Have for Lightning Experience orgs.
Who Is Impacted
LWC/Aura developers, Experience Cloud admins, Service Cloud Console operators, security analysts investigating client-side incidents.
