A mechanism is provided to declaratively identify objects that are sensitive and requiring encryption on logging. A user interface allows an administrator to identify the objects that are deemed to be sensitive log objects and the logging class that provides the logging functionality. The user interface may also allow the administrator to identify the public key to be used for encryption. The mechanism of the present invention dynamically generates logic for encryption of sensitive objects to be logged with declarative identification of sensitive objects.