Re: Jmeter Log4J

2021-12-15 Thread Mariusz W
ives in "bin" folder of your JMeter installation), mitigate security > risk with log4j2 ? > > > > Thanks, > > Yevgeniy Grimaylo > > > > *From: *Mariusz W > *Reply-To: *JMeter Users List > *Date: *Wednesday, December 15, 2021 at 4:09 AM > *To: *J

Re: Jmeter Log4J

2021-12-15 Thread Yevgeniy Grimaylo
at 4:09 AM To: JMeter Users List Subject: Re: Jmeter Log4J I tested it and it works:) -Dlog4j2.formatMsgNoLookups=true Regards, Mariusz On Tue, 14 Dec 2021 at 16:45, Dmitri T mailto:glin...@live.com>> wrote: It should be sufficient to add the next line to system.properties file (lives

Re: Jmeter Log4J

2021-12-15 Thread Mariusz W
I tested it and it works:) *-Dlog4j2.formatMsgNoLookups=true* Regards, Mariusz On Tue, 14 Dec 2021 at 16:45, Dmitri T wrote: > It should be sufficient to add the next line to *system.properties* file > (lives in "bin" folder of your JMeter installation) > > *log4j2.formatMsgNoLookups=true* > >

Re: Jmeter Log4J

2021-12-14 Thread Valery Zabawski
Thank you! Replacing files looks like the most easy way, so I’m going to give it a try. Thanks to everyone for the reply. > 14 дек. 2021 г., в 18:54, Philippe Mouawad > написал(а): > >  > Hello, > You can also read this: >

Re: Jmeter Log4J

2021-12-14 Thread Philippe Mouawad
Hello, You can also read this: https://www.ubik-ingenierie.com/blog/jmeter-and-the-log4j2-vulnerability/ Regards On Tue, Dec 14, 2021 at 4:45 PM Dmitri T wrote: > It should be sufficient to add the next line to *system.properties* file > (lives in "bin" folder of your JMeter installation) > >

Re: Jmeter Log4J

2021-12-14 Thread Dmitri T
It should be sufficient to add the next line to /system.properties/ file (lives in "bin" folder of your JMeter installation) *log4j2.formatMsgNoLookups=true* or pass this property via -D command-line argument like: *jmeter -Dlog4j2.formatMsgNoLookups=true -n -t .* More information: *

Jmeter Log4J

2021-12-14 Thread Smruti Ranjan Roul
Hi Team, With the recent vulnerabilities identified on Apache Log4j on 10th December, I wanted to know if there will be a new version of the Apache JMeter planned with the latest log4j versions. With the organization security policy, there will be a scan on the log4j. We know this will not