Remove the log information for the manage cookie assertion

Products

• CA API Gateway

Issue/Introduction

We are Using the "Manage Cookie" Assertion to remove cookies from a request.

For each cookie removed, an audit log is created with the following format:

Removing cookies: [cookie_name=cookie_value]

Cookies can contain very sensitive information and no option is available to modify the audit like the other assertions via cluster-wide properties like:

audit.auditDetailExcludeList or auditmsg.override.XXXX

Environment

gateway 11.x

Cause

Gateway ssg log will log the information about the excution result of manage cookie assertion like remove the cookie. 

Resolution

The manage cookie assertion created log information at INFO level.  In the cluster wide property log.level add a line to control the package com.l7tech.message.HttpCookiesKnobImpl log level to WARNING or higher: 

com.l7tech.message.HttpCookiesKnobImpl.level = WARNING

This also possible can be done if the log sink configured the log level higher than the INFO level when log sink is used.