Thanks for helpful info. I did notice there was no equivalent for log4j-layout-template-json-2.16.0.
We have changed the query return from XML to JSON, but have done nothing to the logging. I will implement this solution after lunch and test it(make sure solr runs and populates the logs). BTW, Do you know of anything other than nssm or AlwaysUp that would create a Windows service to start Solr when the server is rebooted? NSSM failed our security scan and not sure if cheap bosses want to pay the small fee for AlwaysUp. Thanks Again for Your Helpful Info, George -----Original Message----- From: Shawn Heisey <apa...@elyograg.org> Sent: Wednesday, March 23, 2022 10:55 PM To: users@solr.apache.org Subject: [URL Verdict: Neutral][Non-DoD Source] Re: Solr 8.11.1 upgrading LOG4J from 2.16 to 2.17 All active links contained in this email were disabled. Please verify the identity of the sender, and confirm the authenticity of all links contained within the message prior to copying and pasting the address to a Web browser. ---- On 3/23/2022 12:36 PM, Heller, George A III CTR (USA) wrote: > Can someone tell me where I can download an upgrade or patch for LOG4J > and instructions on how to implement it? Did you try googling? Because if I enter "log4j download" (minus the quotes) into Google, the first hit looks like it is exactly what you want. You'll want the "binary" download, either .tar.gz or .zip format. As for what to do with it once you download it, just find all the log4j jars in your Solr directory and replace them with jars from the log4j archive that have the same names and different version numbers. There has been a fair amount of user testing and we have determined that this is a safe operation, as long as you don't leave some jars at a different version than the rest. The log4j public API is very stable, which is why this is safe to do, but I have no idea how stable their internal APIs are. Depending on the exact Solr version you have, you may have a jar that starts with "log4j-layout-template-json" ... this jar won't be in the log4j download. If you have not changed Solr's logging configuration so that it outputs JSON formatted logs, you can safely delete this one jar. If you actually need an upgraded version of that jar, you can find it on Maven Central. Caution-https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-layout-template-json/2.17.2/log4j-layout-template-json-2.17.2.jar Thanks, Shawn h ttps://lmgtfy.app/?q=log4j+download
smime.p7s
Description: S/MIME cryptographic signature
