ELA-最新的Log4j vulnerabilities(CVE-2021 44228 & CVE-2021-45046) workaround

ELA-最新的Log4j vulnerabilities(CVE-2021 44228 & CVE-2021-45046) workaround

Please find the steps to mitigate the vulnerabilities CVE- 2021-44228 and CVE-2021-45046 on EventLog Analyzer.

1. Download/unzip the jar files from the below patch,

For EventLog Analyzer:
2. Stop the EventLog Analyzer Service.
3. Stop the Log360 Service.(if it is running and skip if it is not installed)
4. Open an admin cmd and navigate to the following location
      ·<Installation dir>/Eventlog Analyzer/ES/bin
            run stopES.bat file
      ·<Installation dir>/elasticsearch/ES/bin(Skip if location does not exist)
            run stopES.bat file
5. Place all the 3 jars from the patch in the following folders:
      ·<Installation dir>/Eventlog Analyzer/ES/lib
      ·<Installation dir>/elasticsearch/ES/lib(Skip if location does not exist)
6. Delete the following files from both <Eventlog Analyzer>/ES/lib  and <Installation dir>/elasticsearch/ES/lib (Skip if location does not exist)
      log4j-1.2-api-2.9.1.jar or log4j-1.2-api-2.15.0.jar
      log4j-api-2.9.1.jar  or log4j-api-2.15.0.jar
      log4j-core-2.9.1.jar or log4j-core-2.15.0.jar
7. Start the EventLog Analyzer Service.