Hi, thanks for your replies This change is a temporary change as we plan to upgrade to update Solr to Later version soon along with sitecore. So we decided to work on a quick fix against the recent vulnurability issue.
On another note, i already implemented the changes on the solr. I can see the log is being written to the Admin Page, but it seems there are no new entry on the log files. Is there any way i can check where the logs are stored or if there are no logs written to file, is there any way i can make it write to a file? Iqrar Aminullah Back-End Developer www.xtremax.com<http://www.xtremax.com/> [https://www.xtremax.com/images/default-source/content/xtr2018_facebookshare_v00.jpg]<http://www.xtremax.com/> Xtremax - Creating Digital Innovation<http://www.xtremax.com/> Xtremax is an awards winning digital company based in Singapore that focuses on creating innovative digital solutions, driven by customer empathy. www.xtremax.com CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information and may be legally protected from disclosure. If you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibited. ________________________________ From: Iqrar Aminullah Sent: Thursday, December 30, 2021 4:39 PM To: users@solr.apache.org <users@solr.apache.org> Subject: Changing from Log4j to JUL or another Logging Library Hi, We are User of Solr 6.6.3 along with Sitecore. Currently my team decided to remove the log4j 1.2.17 in Solr 6.6.3 to mitigate the recent vulnerability issues. I created a Jira ticket, but David Smiley told me to send an email instead. We tried to remove the Log4j library and place a Slf4j-jdk library onto the Solr Application. So far there has been no problems on Solr. To make sure that there is no problem, we decided to send this mail for advice. There are two questions we want to ask. 1. Will changing the library has an impact to the overall Solr performance? 2. Is there anything we can do to make sure the Solr is not vulnerable anymore by changing this library? 3. I was told by David in his comment that JUL isn’t working good. Is there any other logging library we can use aside from JUL for Solr 6.6.3? If there is, do you have any instructions on how to use the other library? Thank you for your Advice Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows
