Default logging appender org.apache.log4j.ConsoleAppender is not good for Web applications

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Create a web application using OWASP ESAPI
2. Add logging using log4j or commons-logging
3. On running the application, logs go to consoleappender instead of 
fileappender

What is the expected output? What do you see instead?
Configured log4j for application to use fileappender, but application instead 
use log4j.xml from ESAPI jar and prints to console instead of file.

What version of the product are you using? On what operating system?
Using ESAPI-2.0-rc6.jar. Tried both on Linux and Windows XP.

Please provide any additional information below.

Original issue reported on code.google.com by deepamti...@gmail.com on 29 Jul 2010 at 9:08

[GoogleCodeExporter]

As of 2.0 RC7, log4j.xml is no longer included in the ESAPI jar file. The 
log4j.xml or log4j.properties on your own classpath should take precedence. 

Please download the latest JAR or build from source and this issue should be 
fixed. 

Original comment by augu...@gmail.com on 30 Sep 2010 at 3:49

• Changed state: Fixed