Hi, We are running on Logstash 8.8.0 and our IT security team has concern about the log4j-core-2.17.1.jar in the logstash-core\lib\jars. Can we disable log4j totally in Logstash and remove the log4j-core-2.17.1.jar from the system?

Is it possible to disable or remove log4j-core-2.17.1.jar from Logstash?

system (system) Closed September 18, 2023, 1:21pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
CVE-2021-44228 Alternative Mitigation Logstash	3	2555	January 12, 2022
Logstash Log4j Update Logstash docker	3	290	July 18, 2022
Log4j security vulnerability for logstash 6.2.2 Logstash	1	964	February 9, 2022
Replace Log4j from 2.11.0 to 2.15.0 Logstash	10	3179	February 3, 2022
CVE-2021-45046 : Incomplete fix for Apache Log4j vulnerability Logstash	2	5792	January 12, 2022