tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel Mikusa <dmik...@vmware.com>
Subject Re: Tomcat Logging and HTTP Header question
Date Fri, 02 Dec 2011 17:36:00 GMT
On Fri, 2011-12-02 at 09:10 -0800, jmpaul012 wrote:
> can anyone help??
> 
> 
> jmpaul012 wrote:
> > 
> > So I am doing Tomcat STIGS and I am stuck on two of the STIGs.
> > 
> > 1.  How do I change what tomcat logs?  I think it's something I need to do
> > in server.xml but I'm not sure.  This is what I need to log:
> > 
> > • Date, Time
> > • IP address of the host that initiated the request
> > • User ID supplied for HTTP authentication
> > • HTTP Method
> > • URL in the request
> > • The protocol and protocol version used to make the request
> > • Source and destination port numbers
> > • Status codes for the response
> > • Size of the response in bytes
> > • HTTP Status and Referrer for the following events:
> > 
> > - Successful and unsuccessful attempts to access the web server software.
> > - Successful and unsuccessful attempts to access the web site.
> > - Successful and unsuccessful attempts to access the web application.
> > 

I believe this one was already answered.

> In any case, your first stop should probably be the on-line
> documentation for the AccessLog Valve.

https://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Access_Log_Valve


> > 
> > 2. How do I view/change the HTTP header information of an intranet site
> > that is using Tomcat?  I have to make sure the HTTP header does not show
> > information about the web server which would include, web server product,
> > version, or host operating system 
> > 

I think you want the "server" attribute of the <Connector/> element.

https://tomcat.apache.org/tomcat-7.0-doc/config/http.html

Dan


Mime
View raw message