Hi , we are using the Elasticsearch 7.3.2 it runs on jdk8, for log4j2 properties changes what are the things need to do in JVM file.

Elastic's recommend steps are provided here Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 For Elasticsearch 7.3 on JDK8 we recommend setting a JVM Option

Elasticsearch 7.3.2 log4j2 properties changes

Elastic Stack Elasticsearch

TimV (Tim Vernum) December 18, 2021, 12:45pm 2

Elastic's recommend steps are provided here

Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31

For Elasticsearch 7.3 on JDK8 we recommend setting a JVM Option

Topic		Replies	Views
Log4j on Elasticsearch 7.9.2 Elasticsearch	9	3344	February 14, 2022
Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2? Elasticsearch	2	1269	January 17, 2022
How do I Mitigate LOG4J CVE on Elasticsearch 7.4.0? Elasticsearch	3	613	January 4, 2023
When will the next patch be released for Elasticsearch Elasticsearch	8	1626	January 17, 2022
Does Elasticsearch-7.x have any api for getting/setting jvm.options and log4j2.properties? Elasticsearch	2	568	June 15, 2019

Elasticsearch 7.3.2 log4j2 properties changes

Related topics