-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Darryl, On 2/21/20 12:49, Darryl Philip Baker wrote: > On 2/21/20, 11:36 AM, "Christopher Schultz" > <ch...@christopherschultz.net> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 > > Darryl, > > On 2/21/20 12:15, Darryl Philip Baker wrote: >> I have taken over the administration of several Tomcat >> instances. A number of these are load balanced using an F5 >> appliance. The org.apache.catalina.values.AccessLogValve log >> file is filled with the F5 polls to see if the application is >> alive. Under almost all circumstances these are useless, I would >> like to stop logging just these requests. > Dumb question: why bother removing them? > > Not so dumb a question, I have 2 reasons. First when looking at > the raw file on the server these poles from the load balancers make > it hard to find the useful entries. grep? > The second reason is we use Splunk as a log aggregator. In Splunk > it is easy to filter these out when looking at the log but having > all these almost useless messages significantly adds to the > activity of the Splunk forwarder on these systems. I'm surprised Splunk doesn't have a "drop records matching pattern" or something like that, so you can just never ingest them. Maybe that would be a feature too easy to exploit. - -chris -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl5T6dEACgkQHPApP6U8 pFg1SA/9Gl05+KgkrmgwKcbcGKf+KgFCaWALn9ui29CdtwBwES9dMVbxDaKppOMg ElQKuGIJt0xjqoL/kBRSaNXPWhB2rst9dv1cJI3XrIKQRIM0TNeGSHByTp76HAZD 6xFIoOjuWb8g5keon8TEBlRa+BRvhM6vvBb7AhJqIdQcXajpPkmNH/kYVDPK6+0I o3ts5gwRtLgf4wErFUZjYR39nk8t9vYgxKJwbWYLeQP9OQrw0ikumzxiadj0YRqk ETuX7SF8MVznL/Aeb4QY0ifS6u2a4E7JU+KEnwnoPEJfus2Wz/y45RxZAFXE6rD1 7LDmKc0abvzclEjUXBZsxYPFPqDaSys76X41/ZrpyeCVcWEfaMb+SLnPZYbi9HMW lgkXRrVsbzYZ7o7yMLMlX1QmnbY/i7eg/xSSoq/8D5ZoRnX0luyT3XwgR4hH7hDP NUdYzMUjZ5yVgC3T7hOAQQ0r908YUaVGTLUVjiVBTv300ntksAQ4fubaoRNEOhlm wLHCBBtd4I2Ff0TbwTWJd2nVVHGhmz7uiEk8V7WVX4wvy319700BSizrclBb4ybm T0GBuRilqa/j8cO13LFFp8sJyz4PnFylkLJC/OC9CFfyG5dTd5TRFE+VT5r4mpfo TFIO+cCPUcUsWnuZzMzyZvQ2veVFYXTAadNNoQE/EZL00KF3bkY= =2I07 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
