Built-in Logging

xorlab Security Platform logs audit, error, and operational events into local log files by default. The properties of those file log appenders can be adjusted in logback.properties for each component:

# supported logback.properties with defaults
# ##############################################################
console.default.pattern=%-5level [%thread]: %logger{0} - %msg%n
console.audit.pattern=AUDIT [%versionGitDescription]: %auditLogType - %jsonMsg%n
file.default.pattern=%-5level %d{yyyy-MM-dd HH:mm:ss.SSSXXX} [%thread]: %logger{0} - %msg%n
file.audit.pattern=AUDIT %d{yyyy-MM-dd HH:mm:ss.SSSXXX} [%versionGitDescription]: %auditLogType - %jsonMsg%n
## rolling log file size policy
## 'default' corresponds to the operational events
file.default.maxFileSize=1GB
file.default.totalSizeCap=5GB
file.default.maxHistory=30
file.error.maxFileSize=1GB
file.error.totalSizeCap=5GB
file.error.maxHistory=30
file.audit.maxFileSize=1GB
file.audit.totalSizeCap=5GB
file.audit.maxHistory=30
# Override root logger level and log less events on stdout - actually logged events to stdout have log level >= max(`root.level`, `stdout.filter.level`)
stdout.filter.level=trace
# level of root appender
root.level=debug