Questions tagged [log4j]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
2 answers
247 views

apache remove wget for better security

Im no expert at IT or apache but I have used linux for years. Ive done my best to harden/secure my server online which I use for a mobile app which needs to serve up its content etc. Ive noticed some ...
Tim's user avatar
  • 203
0 votes
1 answer
16k views

How to replace/update Apache Log4j 1.2.x with 2.17?

My vulnerability scanner recently flagged an unsupported installation of Apache Log4j in a version of MS SQL we just recently deployed (SQL 2019). It causes two high-priority findings that I must get ...
The ITea Guy's user avatar
0 votes
0 answers
2k views

How to detect log4J on windows server 2016 Datacenter machine

So I recently got a mail about updating to the latest security update to the Apache software installed on my server (vulnerability (CVE-2021-44228 & CVE-2021-45046) related to Apache Log4j), but ...
Mads Sander Høgstrup's user avatar
4 votes
2 answers
2k views

Kafka stores log4j logs in directory literally called ${kafka.logs.dir}

I installed a preview version of Kafka 3.0 with log4j2 support (http://home.apache.org/~dongjin/post/apache-kafka-log4j2-support/) on a RHEL 8 server. Kafka and Zookeeper are running successfully as ...
Cabbage Parachute's user avatar
0 votes
0 answers
36 views

locate all nested war/jar files inside jboss/wildfly - log4j [duplicate]

I want to detect all nested wars and jars containing the log4j library. I have jboss/wildfly services. I started to find out with 'locate | grep', but it shows me only tmp directories, not exactly war/...
grU's user avatar
  • 1
1 vote
1 answer
558 views

Log4j - Older app on Windows server using JRE 1.8.0.x - is it impacted?

I can't find any info on whether specific versions of JRE are impacted? The app on my Windows Server 2012 uses JRE 1.8.0.x (1.8.0_91) but not sure if if uses Log4j logging service. Can anyone help ...
Chris's user avatar
  • 11
2 votes
2 answers
4k views

How to scan for log4j on Windows Server

I have a Windows Server 2012 R2 machine. What is the best way to search for log4j. Is it enough with a simple file search or can these files be used from inside a container. I have done a file search ...
Jan Lauridsen's user avatar
0 votes
1 answer
169 views

List of services affected by the Apache Log4jshell Vulnerability

Does there yet exist a list of software that is potentially affected by the Apache Log4jshell vulnerability (CVE-2021-44228) that was announced last Friday? As someone managing a number of servers ...
twhitney's user avatar
  • 133
2 votes
1 answer
5k views

Is nginx affected by the log4j 0 day exploit found recently?

Trying to learn more about the recently discovered 0 day exploit This is a list of affected software I found -> https://github.com/NCSC-NL/log4shell/tree/main/software It only says nginx in a note ...
Rohan's user avatar
  • 135
0 votes
1 answer
300 views

PowerDNS & Log4j

I'm running a PowerDNS on Linux. It looks like PowerDNS is vulnerable to the new log4j-exploit. Is there any way I can disable the Log4j? From my research it looks like you can change the logging ...
Halsi's user avatar
  • 87
1 vote
1 answer
622 views

Use kong reverse proxy to filter log4j exploits

I am using a kong reverse proxy to proxy every HTTP request for my web servers. I would like to mitigate the current log4j problem ("log4shell") by finding and replace the critical attacers' ...
dsteinkopf's user avatar
69 votes
11 answers
219k views

How do I check if Log4j is installed on my server?

I have read about security vulnerabilities related to Log4j. How do I check if Log4j is installed on my server? My specific servers use Ubuntu 18.04.6 LTS. I have installed many third-party packages ...
Uri's user avatar
  • 881
0 votes
0 answers
170 views

Unable to log machine's fqdn instead of "localhost" from java program

I am currently using log4j library in java to post logs onto syslog but those logs always show "localhost" for hostname instead of the device's actual name. This only happens when i send log from my ...
Syed Muhammad Oan's user avatar
0 votes
1 answer
291 views

Appending new lines in Tomcat Catalina log rotate

Application running on Tomcat is using log4j for some unknown reason is appending (randomly) new log lines somewhere in the middle of the log file log4j.properites looks like: log4j.rootLogger=INFO, ...
JackTheKnife's user avatar
2 votes
0 answers
2k views

Tomcat 8.5 Log To Syslog

I have found a tutorial for logging from tomcat to syslog using log4j: https://www.badllama.com/content/tomcat-7-logging-syslog-log4j Sadly this doesn't work anymore in tomcat 8.5. As stated in the ...
BenjaminH's user avatar
  • 121
4 votes
3 answers
10k views

How to combine logrotate with Log4j "rolling" file-appender?

We have a Java-application, that uses log4j and rotates its own logs daily: The currently-used log-file is /var/log/foo/foo.log It is moved into /var/log/foo/foo.log.YYYY-MM-dd when the day changes ...
Mikhail T.'s user avatar
  • 2,377
2 votes
1 answer
464 views

Apache log4j cloudstack log rotation archival policy

I am trying to limit the number of logs that are kept on my cloudstack management server. I am running log4j 1.2 and have recently added "<param name="MaxBackupIndex" value="31"/>" to my config (...
Tom's user avatar
  • 61
0 votes
0 answers
997 views

configure java.util.logging logging.properties to write app logs with systemd

I am charged with making migrating an app from centos 5.5 to centos 7.2. I can start my tomcat app using systemd but the app's log file is not being written to /home/tomcat where people expect it to ...
mr.zog's user avatar
  • 931
3 votes
1 answer
6k views

Parsing log4j log files with logstash

I am parsing multiline log4j logs with logstash and I've got the most curious problem. Here's an example of some related log entries: 2016-01-05 13:55:26,275 DEBUG [class] [thread] - bla 2016-01-05 ...
Zoran's user avatar
  • 302
0 votes
1 answer
2k views

Is there log4net pattern format logs viewer?

Do you know a good free log viewer for existing log4net log files that were written using PatternLayout format? I've found: LegitLogViewer (probably it is possible to configure that one) YALV!(xml) ...
Vladislav Kostenko's user avatar
2 votes
0 answers
1k views

Generation of Tomcat Stdout and Stderr log files

Is there a way to catch tomcat stdout and tomcat stderr log files it to log4j or any other way so that i can keep track daily basis.These files are only generated when we restart tomcat.And i want ...
user292771's user avatar
0 votes
1 answer
1k views

Switching Log4j mode to DEBUG in Weblogic Server

I am using weblogic 10.5 and my application has 4 managed servers, having the below mentioned configuration in weblogic startup script to enable log4j. JAVA_PROPERTIES="${JAVA_PROPERTIES} -Dlog4j....
Jai's user avatar
  • 11
1 vote
1 answer
12k views

Starting tomcat causes "java.io.FileNotFoundException: ../logs/dc.log (No such file or directory)" in catalina.out

I have been seeing this for literally years as part of tomcat apps, and now that I have gone through the steps to investigate it, I can't find the cause. Here's what I see whenever I start tomcat on ...
DrStrangepork's user avatar
1 vote
0 answers
180 views

Datastax Opscenter Agent installation is broken re: log4j

I am trying to install Opscenter, and datastax agent on our Cassandra cluster. When I start the datastax-agent, I am getting this error: log4j:WARN No appenders could be found for logger (org.eclipse....
drewzhrodague's user avatar
2 votes
1 answer
2k views

%HOSTNAME% value is "unknown" in rsyslog template

The Gist Where does rsyslog get the value of %HOSTNAME% and under what conditions would "unknown" be the expected value? We're using rsyslog on an EC2 instance and we're trying to send our logs ...
D. Patrick's user avatar
0 votes
1 answer
63 views

Logging not getting disabled

Out Tomcat 8 is logging so much so that by the evening the catalina.out inflates to GBs of data. I followed the procedure given on the tomcat website to replace JULI logging with LOG4J. Now LOG4J has ...
6nagi9's user avatar
  • 119
1 vote
1 answer
697 views

Custom Event IDs Using NTEventLogAppender

This is my first post on ServerFault, but I love StackOverflow. I'm a coder, and as such I'm more comfortable in an IDE than in the registry, so I've come here for help. Problem: I have a chain of ...
ThoughtCrhyme's user avatar
3 votes
4 answers
3k views

Is there a way to throttle syslog

We use Log4J with its SyslogAppender to send messages to a central syslog-ng server, all running on Unix machines. Is there a way (whether that's in Java or in Unix) to throttle the number of ...
Rich's user avatar
  • 1,353
3 votes
2 answers
13k views

JBoss: reload log4j config without restarting the server?

We are using JBoss application servers for our new web applications that use Apache log4j for logging. We are using JBoss for some months now and everything works out cool, the centralized config ...
fgysin's user avatar
  • 448
0 votes
1 answer
2k views

How to log all sql going through JBoss datasource with log4j

I've looked at log4jdbc (which does not support datasources), p6spy which seems to be what I am looking for but it has not been updated since 2003 which makes me nervous and lists only JBoss 3.x (we ...
Ichorus's user avatar
  • 485
7 votes
3 answers
12k views

Why do JBoss and Logrotate create log files full of NUL characters?

I've set up Logrotate to rotate my JBoss Application Server 4.2.2.GA logs nightly. After the log files have been rotated and JBoss starts writing to them again, the new log files begin with as many ...
Ben Williams's user avatar
  • 2,396