[SOLR-14138] Fix commented-out RequestLog in jetty.xml to use non-deprecated class

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 8.5
• Assignee: Robert Muir
• Reporter: Robert Muir
• Created: 21/Dec/19 18:01
• Updated: 16/Mar/22 16:29
• Resolved: 23/Dec/19 15:42

Description

Currently the jetty request logging is disabled (commented out).

But it can be useful, e.g. since it uses a standard logging format and there are tools to analyze it by default. Also it can be used to detect some attacks not otherwise logged anywhere else, since they don't make it to solr servlet: requests blocked at the jetty level (invalid/malformed requests, ones filtered by jetty IP filtering, etc).

We should switch it from the deprecated NCSARequestLog class, instead to use the CustomRequestLog with either NCSA_FORMAT or EXTENDED_NCSA_FORMAT.

Deprecated.
use CustomRequestLog given format string CustomRequestLog.EXTENDED_NCSA_FORMAT with a RequestLogWriter

Issue Links

• is related to: SOLR-14142 Enable jetty's request log by default
• relates to: SOLR-14501 Reduce retention period of Jetty NCSA request log
• links to: GitHub Pull Request #1110