Elasticsearch 7.3.2 log4j2 properties changes

[Siva_Karan]

Hi ,
we are using the Elasticsearch 7.3.2 it runs on jdk8, for log4j2 properties changes what are the things need to do in JVM file.

[TimV (Tim Vernum)]

Elastic's recommend steps are provided here

• Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31

For Elasticsearch 7.3 on JDK8 we recommend setting a JVM Option

[Siva_Karan]

Thanks Timv.