This page lists the undocumented Derby behavior which can be handy to the users at the same time, the users should be aware that this behavior is not documented and hence it is subject to change at anytime.
Client side tracing under Network Server
Currently, the client tracing can be enabled by setting jdbc url attributes or through setXXX methods on the DataSource or by calling DriverManager.setLogWriter method (More information on these options can be found in the Server and Administration Guide). All these options require changing the client code which may not be a feasible option for a deployed client application. To get around this, in Derby 10.3, 2 new JVM properties(DERBY-1275) have been added. They are namely, derby.client.traceLevel and derby.client.traceDirectory. When the client application is started, the users can include these 2 JVM properties to start the client side tracing. eg java -Dderby.client.traceDirectory=./traceDir -Dderby.client.traceLevel=64 clientApplication
When running under security manager, read permission for these properties is required. If permission to read the properties is not allowed, the properties will be ignored and tracing will not be affected.