Setting Tomcat and JSP Web Session Timeouts

From Support

Inside the web.xml file there should be a block that looks like this:

<session-config>

 <session-timeout>30</session-timeout>

</session-config>

Just change the "30" to how long you want the session to persist. This is an integer value reflecting the number of minutes. You don't want to have too long of a session especially if there are a large number of users due to sessions holding resident memory until they expire. You can get away with increasing the timeout to a reasonable amount assuming you don't have thousands of users/sessions open concurrently.