[MRM-1130] add security audit log and clean up logging configuration

git-svn-id: https://svn.apache.org/repos/asf/archiva/trunk@752431 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/archiva-modules/archiva-web/archiva-webapp/src/main/resources/log4j.xml b/archiva-modules/archiva-web/archiva-webapp/src/main/resources/log4j.xml
index a7642208ea4aefa53909b1148350d1f3506de1a2..d92e2fa89217418d6b21b1a02af0850f2ae67f7a 100644 (file)
--- a/archiva-modules/archiva-web/archiva-webapp/src/main/resources/log4j.xml
+++ b/archiva-modules/archiva-web/archiva-webapp/src/main/resources/log4j.xml
@@ -21,18 +21,31 @@
     </layout>
   </appender>
 
-  <!-- Help identify bugs during testing -->
-  <logger name="org.apache.maven.archiva">
+  <appender name="redbackAuditLog" class="org.apache.log4j.DailyRollingFileAppender">
+    <param name="file" value="${appserver.base}/logs/archiva-security-audit.log" />
+    <param name="append" value="true" />
+    <param name="datePattern" value="'.'yyyy-MM-dd" />
+    <layout class="org.apache.log4j.PatternLayout">
+      <param name="ConversionPattern" value="%d{yyyy-MM-dd HH:mm:ss} - %X{redback.currentUser} - %m%n"/>
+    </layout>
+  </appender>
+
+  <logger name="org.codehaus.plexus.redback.struts2.action.AuditEvent" additivity="false">
+    <level value="info" />
+    <appender-ref ref="redbackAuditLog" />
+  </logger>
+
+  <logger name="org.apache.archiva">
     <level value="info"/>
     <appender-ref ref="rolling" />
   </logger>
   
-  <logger name="org.apache.maven.archiva.repository.scanner">
-    <level value="info" />
+  <logger name="org.apache.maven.archiva">
+    <level value="info"/>
     <appender-ref ref="rolling" />
   </logger>
-
-  <logger name="org.apache.archiva.AuditLog">
+  
+  <logger name="org.apache.archiva.AuditLog" additivity="false">
     <level value="info" />
     <appender-ref ref="auditlog" />
   </logger>