On Windows XP, when wrapper.syslog.loglevel is set to anything other than 'NONE', the appropriate logs are added to the 'System event viewer', but all events ('ALL') appear to be added to the 'Application event viewer'.
For example, if I set wrapper.syslog.loglevel to SEVERE and all other .loglevel and .level properties to NONE, about 5 seconds after I start the service I already have 65 items in my 'Application event viewer'. Below are a few of the messages I see just after launch:
TYPE CATEGORY DESCRIPTION
Information jvm1 Send a packet PING : ok
Information wrapperp read a packet PING : ok
Information wrapper Got ping response from JVM
Information jvm1 Send a packet PING : ok
Information jvm1 Received a packet PING : ok
... and on and on and on and on
(After several minutes I have 2,000+ messages in the 'Application event viewer')
Logged In: YES
user_id=228081
Originator: NO
Sean,
The problem is that the the "SEVERE" log level is invalid. Possible values are DEBUG, INFO, STATUS ERROR, FATAL, and NONE. See the following:
http://wrapper.tanukisoftware.org/doc/english/prop-syslog-loglevel.html
If an invalid log level is encountered it defaults to DEBUG. That is why you are getting so many messages. As the documentation says, DEBUG and INFO levels are not recommended for the syslog/event log.
All log entries should be getting added to the Application event log. You mentioned the System category? Are you getting messages in there as well? I just tested this myself and am only getting messages in the Application event log.
Cheers,
Leif