<p>I have a huge ear that uses log4j and there is a single config file that is used to set it up. In this config file there is no mention of certain log files but, additional files apart from those specified in the config file get generated in the logs folder. I've searched for other combinations of (logger|log4j|log).(properties|xml) and haven't found anything promising in all of the jar files included in the ear. How do I track down which is the offending thread/class that is creating these extra files?</p>

[{'answer_id': 65204, 'author': 'Adam Caviness', 'author_id': 9130, 'author_profile': 'https://Stackoverflow.com/users/9130', 'pm_score': 0, 'selected': False, 'text': '<p>Formally SysInternal\'s, now Microsoft\'s Process Explorer\n<a href="http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx" rel="nofollow noreferrer">http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx</a></p>\n\n<p>"Find" menu item -> "Find Handle or DLL..."</p>\n'}, {'answer_id': 65280, 'author': 'Community', 'author_id': -1, 'author_profile': 'https://Stackoverflow.com/users/-1', 'pm_score': 0, 'selected': False, 'text': '<p>SysInternals may not help with Java class IO.  Try getting a thread dump of the JVM (e.g., kill -3) while these logs are being written to.  You should be able to catch a thread red handed with java.io packages near the top of the stack trace.</p>\n'}, {'answer_id': 65618, 'author': 'MetroidFan2002', 'author_id': 8026, 'author_profile': 'https://Stackoverflow.com/users/8026', 'pm_score': 3, 'selected': True, 'text': "<p>Try placing a breakpoint in the File class' constructors and the mkdir and createNewFile methods.  Generally, code will use the File class to create its files or directories.  You should have the Java source code for these classes included with your JVM.</p>\n"}, {'answer_id': 65957, 'author': 'James A. N. Stauffer', 'author_id': 6770, 'author_profile': 'https://Stackoverflow.com/users/6770', 'pm_score': 2, 'selected': False, 'text': '<p>Add <code>-Dlog4j.debug</code> to the command line and there will be extra info in standard output about how it is configured.</p>\n'}]
['https://Stackoverflow.com/questions/65128', 'https://Stackoverflow.com', 'https://Stackoverflow.com/users/7616/']