Is there any way that we can stop logging of request parameters in jasper.log?
Created May 7, 2012
Alessandro A. Garbagnati [All our request parameters are getting logged in jasper.log (this includes passwords!!!) Is there any way that we can stop logging of request parameters in jasper.log?]
The amount of information that are logged on any log file (tomcat.log, servlet.log and jasper.log), among with the location (file or console), are set in the server configuration file of the instance (normally conf/server.xml):
<Logger name="tc_log" path="logs/tomcat.log" verbosityLevel = "ERROR" /> <Logger name="servlet_log" path="logs/servlet.log" verbosityLevel = "ERROR" /> <Logger name="JASPER_LOG" path="logs/jasper.log" verbosityLevel = "ERROR" />
The server.xml file has a comment explaining which verbosity levels are allowed:
FATAL ERROR WARNING INFORMATION DEBUGwhere FATAL will log only fatal problems, and debug will log everything.