Any concerns with this change? My experience from using Ambari to manage Knox is that we set this flag to false for every install. We didn't want to log files to grow uncontrollably since kerberos debugging goes to a log file that doesn't roll. Kevin Risden