So I am doing Tomcat STIGS and I am stuck on two of the STIGs. 1. How do I change what tomcat logs? I think it's something I need to do in server.xml but I'm not sure. This is what I need to log:
• Date, Time • IP address of the host that initiated the request • User ID supplied for HTTP authentication • HTTP Method • URL in the request • The protocol and protocol version used to make the request • Source and destination port numbers • Status codes for the response • Size of the response in bytes • HTTP Status and Referrer for the following events: - Successful and unsuccessful attempts to access the web server software. - Successful and unsuccessful attempts to access the web site. - Successful and unsuccessful attempts to access the web application. 2. How do I view/change the HTTP header information of an intranet site that is using Tomcat? I have to make sure the HTTP header does not show information about the web server which would include, web server product, version, or host operating system -- View this message in context: http://old.nabble.com/Tomcat-Logging-and-HTTP-Header-question-tp32892450p32892450.html Sent from the Tomcat - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
