[jboss-jira] [JBoss JIRA] (WFLY-3222) Add access logging to managment web server

[Tomaz Cerar (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-3222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12959481#comment-12959481 ] 

Tomaz Cerar commented on WFLY-3222:
-----------------------------------

That is not the same data that is avalible in audit log, there is some overlap.
Before we switched to undertow we had some minor http logging in sun http server, so you could see http requests and its statuses on mgmt interface, now we lack that.
This is useful for debugging what is going on, what console is loading, or maybe debugging custom rest api calls.
"problem" with audit logging is that only actions that happen after user is authenticated and an operation is invoked.
Everything before that we are missing. 
User would for example see login failed attempts or access denied for some resources as maybe some rouge software is trying to break into system.
                
> Add access logging to managment web server
> ------------------------------------------
>
>                 Key: WFLY-3222
>                 URL: https://issues.jboss.org/browse/WFLY-3222
>             Project: WildFly
>          Issue Type: Enhancement
>      Security Level: Public(Everyone can see) 
>          Components: Domain Management
>    Affects Versions: 8.0.0.Final
>            Reporter: Tomaz Cerar
>            Assignee: Tomaz Cerar
>
> It should be possible to configure access log for management web server.
> so we could have access log for management calls with IPs from where they came.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira