[ https://issues.jboss.org/browse/WFLY-3222?page=com.atlassian.jira.plugin.... ] Brian Stansberry commented on WFLY-3222: ---------------------------------------- There needs to be a discussion here or on the dev list showing exactly what will be logged before this proceeds. There's a clear overlap with audit logging, and those need to be distinct or we need to ensure there is unified configuration with this and the audit log such that people who think they have locked down the data in the audit log don't find that it's all leaked out via a separately configured access log. My primary concern: management resource addresses are potentially sensitive data. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira