...
Typically, only one logger is required for the entire program.
Exceptions
EXC07-EX0: Some application servers such as IBM's WebSphere automatically log critical security exceptions such as AccessControlException
. However, such servers may fail to log the entire set of exceptions considered critical in the security model for any particular program. Consequently, programs must appropriately log all critical security exceptions beyond those logged by their application server.
Risk Assessment
Exceptions thrown during data logging can cause loss of data and can conceal security problems.
...