I currently have Tomcat access log enable which will log all the query that
hits my web server. Some of the information is "confidential". So is there
a mechanism that I can use to add a interceptor or filter to "encrypt" those
information before it gets log into the access log?

Any suggestion or pointer would be greatly appreciated!

John