I have a web app with a 30 min session timeout. The design is that when the session is dropped the user is automatically logged out and needs to sign in again.

Problem is that I have a news ticker on my web page that updates every 5 minutes via an AJAX call. The newsticker AJAX call naturally resets the session timeout, so the users don't get logged out.

I was thinking of implementing my own inactivity detector by writing a filter that updates a `lastActive` variable (stored in the session) whenever the user gets/posts a page, except for the news ticker.

Then I was thinking, maybe there is a way to exclude certain calls from resetting the session timeout. So I searched and found some answers relating to asp, but nothing for jsp and Weblogic. 

Is there a way to exclude certain URL:s from resetting the session timeout?