@panda I am not saying that there is not issue, but the sole issue is that Logback follows any JNDI URL. The "file" injection applies to any system which Logback has not to solve. You can also replace the logging file to send to a TCP receiver to intercept logging messages.