Configuring Tomcat JSS Logging

Tomcat JSS 7.3 or Later

Starting from version 7.3 the JSS Connector will use JUL logging framework.

To customize the logging configuration:

$ rm -f /var/lib/pki/pki-tomcat/conf/logging.properties
$ cp /usr/share/pki/server/conf/logging.properties /var/lib/pki/pki-tomcat/conf/
$ chown pkiuser.pkiuser /var/lib/pki/pki-tomcat/conf/logging.properties

Edit /var/lib/pki/pki-tomcat/conf/logging.properties and configure the following lines:

org.apache.catalina.core.ContainerBase.[Catalina].[localhost].level = FINE
org.apache.tomcat.util.net.jss.level = FINE
org.dogtagpki.tomcat.level = FINE

Then restart the server. The logs will appear on the server console (i.e. systemd journal):

$ journalctl -fu pki-tomcatd@pki-tomcat.service

Tomcat JSS 7.2 or Older

To enable the legacy debug logs, edit /var/lib/pki/pki-tomcat/conf/server.xml, add the debug parameter in the Connector element:

<Connector
    port="8443"
    ...
    debug="true"
/>

Start/restart the server. The logs will be stored in /tmp/tomcatjss.log (the file name is hardcoded).

See Also

• Logging Frameworks

• PKI Server Logging