diff --git a/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java b/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java index 90701cf28..7e861423d 100644 --- a/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java +++ b/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java @@ -241,7 +241,7 @@ public class JarAnalyzer extends AbstractAnalyzer implements Analyzer { final AnalysisException ax = new AnalysisException(msg, ex); dependency.getAnalysisExceptions().add(ax); Logger.getLogger(JarAnalyzer.class.getName()).log(Level.WARNING, msg); - Logger.getLogger(JarAnalyzer.class.getName()).log(Level.INFO, msg, ex); + Logger.getLogger(JarAnalyzer.class.getName()).log(Level.FINE, null, ex); return foundSomething; } List pomEntries; @@ -271,11 +271,11 @@ public class JarAnalyzer extends AbstractAnalyzer implements Analyzer { path, dependency.getFilePath()); final AnalysisException ax = new AnalysisException(msg, ex); dependency.getAnalysisExceptions().add(ax); - Logger.getLogger(JarAnalyzer.class.getName()).log(Level.INFO, msg, ax); + Logger.getLogger(JarAnalyzer.class.getName()).log(Level.FINE, msg, ax); } catch (IOException ex) { final String msg = String.format("Unable to retrieve POM '%s' in '%s'", path, dependency.getFilePath()); - Logger.getLogger(JarAnalyzer.class.getName()).log(Level.INFO, msg, ex); + Logger.getLogger(JarAnalyzer.class.getName()).log(Level.FINE, msg, ex); } foundSomething = setPomEvidence(dependency, pom, pomProperties) || foundSomething; } diff --git a/src/main/java/org/owasp/dependencycheck/data/nvdcve/CveDB.java b/src/main/java/org/owasp/dependencycheck/data/nvdcve/CveDB.java index cee6b84ff..095e4387d 100644 --- a/src/main/java/org/owasp/dependencycheck/data/nvdcve/CveDB.java +++ b/src/main/java/org/owasp/dependencycheck/data/nvdcve/CveDB.java @@ -403,7 +403,7 @@ public class CveDB { } catch (SQLException ex) { final String msg = String.format("Error updating '%s'", vuln.getName()); - Logger.getLogger(CveDB.class.getName()).log(Level.INFO, null, ex); + Logger.getLogger(CveDB.class.getName()).log(Level.FINE, null, ex); throw new DatabaseException(msg, ex); } } diff --git a/src/main/java/org/owasp/dependencycheck/data/nvdcve/xml/DatabaseUpdater.java b/src/main/java/org/owasp/dependencycheck/data/nvdcve/xml/DatabaseUpdater.java index 44600e200..2f2856dc0 100644 --- a/src/main/java/org/owasp/dependencycheck/data/nvdcve/xml/DatabaseUpdater.java +++ b/src/main/java/org/owasp/dependencycheck/data/nvdcve/xml/DatabaseUpdater.java @@ -374,8 +374,8 @@ public class DatabaseUpdater implements CachedWebDataSource { try { currentTimestamp = Long.parseLong(prop.getProperty(LAST_UPDATED_BASE + String.valueOf(i), "0")); } catch (NumberFormatException ex) { - Logger.getLogger(DatabaseUpdater.class.getName()).log(Level.FINEST, "Error parsing " + LAST_UPDATED_BASE - + String.valueOf(i) + " from nvdcve.lastupdated", ex); + final String msg = String.format("Error parsing '%s' '%s' from nvdcve.lastupdated", LAST_UPDATED_BASE, String.valueOf(i)); + Logger.getLogger(DatabaseUpdater.class.getName()).log(Level.FINEST, msg, ex); } if (currentTimestamp == cve.getTimestamp()) { cve.setNeedsUpdate(false); //they default to true. diff --git a/src/main/resources/configuration/log.properties b/src/main/resources/configuration/log.properties index 8748567cf..4075748da 100644 --- a/src/main/resources/configuration/log.properties +++ b/src/main/resources/configuration/log.properties @@ -5,13 +5,13 @@ handlers=java.util.logging.ConsoleHandler # FINEST, FINER, FINE, CONFIG, INFO, WARNING and SEVERE. # Configure the ConsoleHandler. -java.util.logging.ConsoleHandler.level=WARNING +java.util.logging.ConsoleHandler.level=INFO org.owasp.dependencycheck.data.nvdcve.xml # Configure the FileHandler. -#java.util.logging.FileHandler.formatter=java.util.logging.SimpleFormatter -#java.util.logging.FileHandler.level=FINEST +java.util.logging.FileHandler.formatter=java.util.logging.SimpleFormatter +java.util.logging.FileHandler.level=FINE # The following special tokens can be used in the pattern property # which specifies the location and name of the log file. @@ -21,4 +21,4 @@ org.owasp.dependencycheck.data.nvdcve.xml # %g - generation number for rotating logs # %u - unique number to avoid conflicts # FileHandler writes to %h/demo0.log by default. -#java.util.logging.FileHandler.pattern=./logs/DependencyCheck%u.log \ No newline at end of file +java.util.logging.FileHandler.pattern=./logs/DependencyCheck.log \ No newline at end of file