On Fri, 2011-12-02 at 09:10 -0800, jmpaul012 wrote: > can anyone help?? > > > jmpaul012 wrote: > > > > So I am doing Tomcat STIGS and I am stuck on two of the STIGs. > > > > 1. How do I change what tomcat logs? I think it's something I need to do > > in server.xml but I'm not sure. This is what I need to log: > > > > • Date, Time > > • IP address of the host that initiated the request > > • User ID supplied for HTTP authentication > > • HTTP Method > > • URL in the request > > • The protocol and protocol version used to make the request > > • Source and destination port numbers > > • Status codes for the response > > • Size of the response in bytes > > • HTTP Status and Referrer for the following events: > > > > - Successful and unsuccessful attempts to access the web server software. > > - Successful and unsuccessful attempts to access the web site. > > - Successful and unsuccessful attempts to access the web application. > >
I believe this one was already answered. > In any case, your first stop should probably be the on-line > documentation for the AccessLog Valve. https://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Access_Log_Valve > > > > 2. How do I view/change the HTTP header information of an intranet site > > that is using Tomcat? I have to make sure the HTTP header does not show > > information about the web server which would include, web server product, > > version, or host operating system > > I think you want the "server" attribute of the <Connector/> element. https://tomcat.apache.org/tomcat-7.0-doc/config/http.html Dan
