Encode all logs in Slf4j

Asked Mar 03 '20 at 07:17

Active Mar 03 '20 at 07:52

Viewed 985 times

Is there any good way to custom logging to Slf4j

I wanted to ESAPI encode all logs before printing to console.Is there any better way to do it.

currently I use

log.info("This is my log {}", id);

is it possible to achieve with out using EsAPiLogger. It will be huge change to do in multiple places

I do not want to change the implementation in my code.

Any help on this

edited Mar 03 '20 at 07:41

asked Mar 03 '20 at 07:17

Patan

17,073
36
124
198

Have you set `LogEncodingRequired=true` ?? – Vishwa Ratna Mar 03 '20 at 07:22
@VishwaRatna I wanted to use ESAPI for encoding, is there any way to do it – Patan Mar 03 '20 at 07:27
1

Slf4j is an interface, it does not do anything. So, the question is meaningless. Apparently you are using some implementation, e.g. logback or log4j, please find out and look for how to customise appenders. – kan Mar 03 '20 at 07:32
How would the logs look then? – Thorbjørn Ravn Andersen Mar 03 '20 at 07:36
@ThorbjørnRavnAndersen , it is in encoded form. Quite people use it to prevent attacks. – Vishwa Ratna Mar 03 '20 at 07:37
Include the proper ESAPI jars with support for SLF4j, configure ESAPI and it should work. See https://javadoc.io/static/org.owasp.esapi/esapi/2.2.0.0/index.html?org/owasp/esapi/logging/slf4j/package-summary.html – M. Deinum Mar 03 '20 at 07:49
@M.Deinum thanks, can you share any example – Patan Mar 03 '20 at 07:51
Remove logback or whatever you are using and include the proper esapi jar that include those files. Should work immediatly. Make sure you use the latest version as well. – M. Deinum Mar 03 '20 at 07:52
@M.Deinum ESAPI logging format is different right. SO this will change log.info("This is my log {}", id); – Patan Mar 03 '20 at 07:55
No it won't. ESAPI contains a SLF4j delegate/adapter. – M. Deinum Mar 03 '20 at 07:57
@M.Deinum. Can you help me how to initialize logger – Patan Mar 03 '20 at 09:04
You don't need to . Just include the proper jars, the slf4j detecting mechanism will do the rest. Make sure you don't include things like logbakc, log4j(2) etc. – M. Deinum Mar 03 '20 at 09:36

Encode all logs in Slf4j

0 Answers0