Hi,
I am looking for help to handle ‑Dlog4j.formatMsgNoLookups=true option in
ignite and where can I find log4j2.component.properties file inside the
ignite
Thanks & Regards,
Charlin
Hello, the ‑Dlog4j.formatMsgNoLookups=true doesn't solve the CVE of
log4j, infact it's explained in CVE-2021-45046.
I think you have to substitute the log4j jar or remove the class from the
original log4j , see this link :
https://nvd.nist.gov/vuln/detail/CVE-2021-45046
zip -q -d log4j-core-*
So far I haven't seen anyone ask about the issue here in the lists. So I'll
give it a go.
I'm personally using 2.8.1
1- If we are running as a service using .DEB or .RPM or other linux
packages: The default logging is JUL so nothing to worry about.
2- If we aren' t specifically enabling the ignit