This week's book giveaway is in the OCAJP 8 forum. We're giving away four copies of OCA Java SE 8 Programmer I Study Guide and have Edward Finegan & Robert Liguori on-line! See this thread for details.
There might be a tomcat setting for limiting this but it seems easier to limit the upload size in your app. It is likely that you have a loop that is reading bytes from the incoming stream. You can just keep a sum of the size you've read so far and then throw an error if the size is greater than your threshold.
An advantage of doing this yourself instead of having tomcat do it is that your app is a little more portable. You can move it to another servlet container without worrying about the upload size limiting.