All of our classes in web applications implement Serializable. So we also start each one of them off, with "private static transient Log logger = LogFactory.getLog(blah.class)" (that's org.apache.commons.logging.Log). That way if they are serialized in session scope on a clustered app server, there will not be a problem with the Log, which is not serializable.