> From: John Hui [mailto:[EMAIL PROTECTED] 
> Subject: Re: Tomcat access log question
> 
> I am actually not permitted to store any of these 
> confidential information any where including ( the
> access logs ).

Due to the rather specialized nature of your requirements, your best bet
may well be to use your own access logger, extending the Tomcat-supplied
one.  That way you can strip out or mask the confidential information
without worrying about who has read access to the logs.  Just override
the invoke() method of whichever access log valve you're using:
    org/apache/catalina/valves/AccessLogValve.java
    org/apache/catalina/valves/ExtendedAccessLogValve.java
    org/apache/catalina/valves/FastCommonAccessLogValve.java

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to