
So I've been messing with the logging constructs of Tomcat. Had to be able to capture every little tidbit required for forensics and legal purposes in case there's a problem.
I'm surprised at the number of netizens out there who don't realize that much of what they do on the web is recorded for posterity ... maybe not down to the name and address but certainly down to the IP address which can be cross referenced via the route if a subpoena is required.
Having migrated my primary datastore off the cluster has streamlined that part of it down to mainly firewalling little piss ant dweebs out to break and enter ...
but I digress yet again.

The logging mechanics of Tomcat differ somewhat from Apache so I had to ramp up but I like the container arrangement and I wrote myself a little cheat sheet then voila ! I'm logging all aspects I deem appropriate to the task and it took every bit of around fifteen minutes or so.
However, the hardening wasn't nearly so involved. Fewer variables.
That was after a week or so of reading documentation and screwing up the syntax a couple of times bringing everything to a screeching halt.
Word to the wise: make sure you have an adquate backup of your control files prior to embarking on extended configuration procedures. They certainly saved me with this project.
Anyway, enough of adventures in Tomcat logging and I hope you're day goes as swimmingly as mine !