# Is it possible to disable or remove log4j-core-2.17.1.jar from Logstash?
**URL:** https://discuss.elastic.co/t/is-it-possible-to-disable-or-remove-log4j-core-2-17-1-jar-from-logstash/341221
**Category:** Logstash
**Created:** [August 21, 2023, 10:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-or-remove-log4j-core-2-17-1-jar-from-logstash/341221 "2023-08-21T10:18:17Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@kam89](https://discuss.elastic.co/u/kam89)
#### Post date: [August 21, 2023, 10:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-or-remove-log4j-core-2-17-1-jar-from-logstash/341221/1 "2023-08-21T10:18:17Z")
Hi,
We are running on Logstash 8.8.0 and our IT security team has concern about the log4j-core-2.17.1.jar in the logstash-core\lib\jars.
Can we disable log4j totally in Logstash and remove the log4j-core-2.17.1.jar from the system?
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [August 21, 2023, 1:20pm UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-or-remove-log4j-core-2-17-1-jar-from-logstash/341221/2 "2023-08-21T13:20:59Z")
> [@kam89](#):
>
> We are running on Logstash 8.8.0 and our IT security team has concern about the log4j-core-2.17.1.jar in the logstash-core\lib\jars.
What concerns? I don't think there is any active security issues regarding log4j, the RCE issues that affected log4j a couple of months ago where fixed in `2.17.1` as explained [here](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476/1).
You can't disable log4j totally in Logstash as it is needed.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 18, 2023, 1:21pm UTC](https://discuss.elastic.co/t/is-it-possible-to-disable-or-remove-log4j-core-2-17-1-jar-from-logstash/341221/3 "2023-09-18T13:21:35Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.