Questions tagged [log4j]
The log4j tag has no usage guidance.
31
questions
0
votes
2
answers
247
views
apache remove wget for better security
Im no expert at IT or apache but I have used linux for years.
Ive done my best to harden/secure my server online which I use for a mobile app which
needs to serve up its content etc.
Ive noticed some ...
0
votes
1
answer
16k
views
How to replace/update Apache Log4j 1.2.x with 2.17?
My vulnerability scanner recently flagged an unsupported installation of Apache Log4j in a version of MS SQL we just recently deployed (SQL 2019). It causes two high-priority findings that I must get ...
0
votes
0
answers
2k
views
How to detect log4J on windows server 2016 Datacenter machine
So I recently got a mail about updating to the latest security update to the Apache software installed on my server (vulnerability (CVE-2021-44228 & CVE-2021-45046) related to Apache Log4j), but ...
4
votes
2
answers
2k
views
Kafka stores log4j logs in directory literally called ${kafka.logs.dir}
I installed a preview version of Kafka 3.0 with log4j2 support (http://home.apache.org/~dongjin/post/apache-kafka-log4j2-support/) on a RHEL 8 server. Kafka and Zookeeper are running successfully as ...
0
votes
0
answers
36
views
locate all nested war/jar files inside jboss/wildfly - log4j [duplicate]
I want to detect all nested wars and jars containing the log4j library. I have jboss/wildfly services. I started to find out with 'locate | grep', but it shows me only tmp directories, not exactly war/...
1
vote
1
answer
558
views
Log4j - Older app on Windows server using JRE 1.8.0.x - is it impacted?
I can't find any info on whether specific versions of JRE are impacted? The app on my Windows Server 2012 uses JRE 1.8.0.x (1.8.0_91) but not sure if if uses Log4j logging service. Can anyone help ...
2
votes
2
answers
4k
views
How to scan for log4j on Windows Server
I have a Windows Server 2012 R2 machine. What is the best way to search for log4j. Is it enough with a simple file search or can these files be used from inside a container. I have done a file search ...
0
votes
1
answer
169
views
List of services affected by the Apache Log4jshell Vulnerability
Does there yet exist a list of software that is potentially affected by the Apache Log4jshell vulnerability (CVE-2021-44228) that was announced last Friday?
As someone managing a number of servers ...
2
votes
1
answer
5k
views
Is nginx affected by the log4j 0 day exploit found recently?
Trying to learn more about the recently discovered 0 day exploit
This is a list of affected software I found -> https://github.com/NCSC-NL/log4shell/tree/main/software
It only says nginx in a note ...
0
votes
1
answer
300
views
PowerDNS & Log4j
I'm running a PowerDNS on Linux.
It looks like PowerDNS is vulnerable to the new log4j-exploit. Is there any way I can disable the Log4j?
From my research it looks like you can change the logging ...
1
vote
1
answer
622
views
Use kong reverse proxy to filter log4j exploits
I am using a kong reverse proxy to proxy every HTTP request for my web servers. I would like to mitigate the current log4j problem ("log4shell") by finding and replace the critical attacers' ...
69
votes
11
answers
219k
views
How do I check if Log4j is installed on my server?
I have read about security vulnerabilities related to Log4j.
How do I check if Log4j is installed on my server?
My specific servers use Ubuntu 18.04.6 LTS.
I have installed many third-party packages ...
0
votes
0
answers
170
views
Unable to log machine's fqdn instead of "localhost" from java program
I am currently using log4j library in java to post logs onto syslog but those logs always show "localhost" for hostname instead of the device's actual name. This only happens when i send log from my ...
0
votes
1
answer
291
views
Appending new lines in Tomcat Catalina log rotate
Application running on Tomcat is using log4j for some unknown reason is appending (randomly) new log lines somewhere in the middle of the log file
log4j.properites looks like:
log4j.rootLogger=INFO, ...
2
votes
0
answers
2k
views
Tomcat 8.5 Log To Syslog
I have found a tutorial for logging from tomcat to syslog using log4j:
https://www.badllama.com/content/tomcat-7-logging-syslog-log4j
Sadly this doesn't work anymore in tomcat 8.5. As stated in the ...
4
votes
3
answers
10k
views
How to combine logrotate with Log4j "rolling" file-appender?
We have a Java-application, that uses log4j and rotates its own logs daily:
The currently-used log-file is /var/log/foo/foo.log
It is moved into /var/log/foo/foo.log.YYYY-MM-dd when the day changes
...
2
votes
1
answer
464
views
Apache log4j cloudstack log rotation archival policy
I am trying to limit the number of logs that are kept on my cloudstack management server. I am running log4j 1.2 and have recently added "<param name="MaxBackupIndex" value="31"/>" to my config (...
0
votes
0
answers
997
views
configure java.util.logging logging.properties to write app logs with systemd
I am charged with making migrating an app from centos 5.5 to centos 7.2. I can start my tomcat app using systemd but the app's log file is not being written to /home/tomcat where people expect it to ...
3
votes
1
answer
6k
views
Parsing log4j log files with logstash
I am parsing multiline log4j logs with logstash and I've got the most curious problem.
Here's an example of some related log entries:
2016-01-05 13:55:26,275 DEBUG [class] [thread] - bla
2016-01-05 ...
0
votes
1
answer
2k
views
Is there log4net pattern format logs viewer?
Do you know a good free log viewer for existing log4net log files that were written using PatternLayout format?
I've found:
LegitLogViewer (probably it is possible to configure that one)
YALV!(xml)
...
2
votes
0
answers
1k
views
Generation of Tomcat Stdout and Stderr log files
Is there a way to catch tomcat stdout and tomcat stderr log files it to log4j or any other way so that i can keep track daily basis.These files are only generated when we restart tomcat.And i want ...
0
votes
1
answer
1k
views
Switching Log4j mode to DEBUG in Weblogic Server
I am using weblogic 10.5 and my application has 4 managed servers, having the below mentioned configuration in weblogic startup script to enable log4j.
JAVA_PROPERTIES="${JAVA_PROPERTIES} -Dlog4j....
1
vote
1
answer
12k
views
Starting tomcat causes "java.io.FileNotFoundException: ../logs/dc.log (No such file or directory)" in catalina.out
I have been seeing this for literally years as part of tomcat apps, and now that I have gone through the steps to investigate it, I can't find the cause. Here's what I see whenever I start tomcat on ...
1
vote
0
answers
180
views
Datastax Opscenter Agent installation is broken re: log4j
I am trying to install Opscenter, and datastax agent on our Cassandra cluster. When I start the datastax-agent, I am getting this error:
log4j:WARN No appenders could be found for logger (org.eclipse....
2
votes
1
answer
2k
views
%HOSTNAME% value is "unknown" in rsyslog template
The Gist
Where does rsyslog get the value of %HOSTNAME% and under what conditions would "unknown" be the expected value?
We're using rsyslog on an EC2 instance and we're trying to send our logs ...
0
votes
1
answer
63
views
Logging not getting disabled
Out Tomcat 8 is logging so much so that by the evening the catalina.out inflates to GBs of data. I followed the procedure given on the tomcat website to replace JULI logging with LOG4J. Now LOG4J has ...
1
vote
1
answer
697
views
Custom Event IDs Using NTEventLogAppender
This is my first post on ServerFault, but I love StackOverflow. I'm a coder, and as such I'm more comfortable in an IDE than in the registry, so I've come here for help.
Problem: I have a chain of ...
3
votes
4
answers
3k
views
Is there a way to throttle syslog
We use Log4J with its SyslogAppender to send messages to a central syslog-ng server, all running on Unix machines.
Is there a way (whether that's in Java or in Unix) to throttle the number of ...
3
votes
2
answers
13k
views
JBoss: reload log4j config without restarting the server?
We are using JBoss application servers for our new web applications that use Apache log4j for logging. We are using JBoss for some months now and everything works out cool, the centralized config ...
0
votes
1
answer
2k
views
How to log all sql going through JBoss datasource with log4j
I've looked at log4jdbc (which does not support datasources), p6spy which seems to be what I am looking for but it has not been updated since 2003 which makes me nervous and lists only JBoss 3.x (we ...
7
votes
3
answers
12k
views
Why do JBoss and Logrotate create log files full of NUL characters?
I've set up Logrotate to rotate my JBoss Application Server 4.2.2.GA logs nightly. After the log files have been rotated and JBoss starts writing to them again, the new log files begin with as many ...