Detections
Analytics

2.29 Production applications should not log output to the JBoss console - 'JBoss console output log = false'

Information

Turn off console logging in production. Console logging in a production environment is a needless drain on system resources.

Solution

<root>
<!--Set the root logger priority via a system property. Note this is parsed by log4j,
so the full JBoss system property format is not supported; e.g.
setting a default via ${jboss.server.log.threshold:WARN} will not work.-->
 <priority value="${jboss.server.log.threshold}"/>
 <!-- appender-ref ref="CONSOLE"/ -->
 <appender-ref ref="ASYNC"/>
</root>

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-9, CAT|III

Plugin: Unix

Control ID: 49b05b5c1b62786ecf76872e1cf65b80df89fa6995ca410b5fd1c26c35a18b38