3 ms·

an immediate remediation is to set log4j.formatMsgNoLookups=true or log4j2.formatMsgNoLookups=true ctrl+f it here: https://logging.apache.org/log4j/2.x/manual/

by fotta 5y ago

an immediate remediation is to set log4j.formatMsgNoLookups=true or log4j2.formatMsgNoLookups=true ctrl+f it here: https://logging.apache.org/log4j/2.x/manual/configuration.html https://logging.apache.org/log4j/2.x/manual/configuration.ht...

acdha 5y ago
That text isn't present on that page any more – it looks like that was silently removed at some point after December 4th: https://web.archive.org/web/20211204140505/https://logging.apache.org/log4j/2.x/manual/configuration.html https://web.archive.org/web/20211204140505/https://logging.a...
- fotta 5y ago
  I can still see the prop on the page under "Disables Message Pattern Lookups" and "System Properties"
  - jldugger 5y ago
    Wonder why the documentation changed so recently
    - dikei 5y ago
      Because they remove message lookup in version 2.15. https://issues.apache.org/jira/browse/LOG4J2-3198 https://issues.apache.org/jira/browse/LOG4J2-3198
freeqaz 5y ago
There is also a patch available in `log4j-2.15.0-rc1` now. https://github.com/apache/logging-log4j2/releases/tag/log4j-2.15.0-rc1 https://github.com/apache/logging-log4j2/releases/tag/log4j-...
dikei 5y ago
Seem like they updated the doc to version 2.15, which no longer has this configuration. Here's the link for version 2.14.1 https://logging.apache.org/log4j/log4j-2.14.1/manual/configuration.html https://logging.apache.org/log4j/log4j-2.14.1/manual/configu...