Re: Log4j issue

2021-12-20 Thread bab
I cannot understand what does this mean Otherwise, in the configuration, remove references to Context Lookups like ${ctx:loginId} or $${ctx:loginId} where they originate from sources external to the application such as HTTP headers or user input. 1- Would you say what should I do exactly ?

Re: Log4j issue

2021-12-20 Thread bab
Is that your means have to search "${ctx" in Log4j-config.xsd file ? Would you say exactly what parameters need to remove from Log4j-config.xsd file? Quoting Tushar Kapila : Exact plain string (Non regex) to search would be "${ctx" "somekey" is a placeholder for name of variable. On Mon,

Re: Log4j issue

2021-12-20 Thread Tushar Kapila
Exact plain string (Non regex) to search would be "${ctx" "somekey" is a placeholder for name of variable. On Mon, 20 Dec, 2021, 16:29 , wrote: > I searched ${ctx:somekey} in the log4j-config.xsd file but could not > find anything . > Is that means that is enough If we upgrade to 2.17 or just r

Re: Log4j issue

2021-12-20 Thread bab
I searched ${ctx:somekey} in the log4j-config.xsd file but could not find anything . Is that means that is enough If we upgrade to 2.17 or just remove the class file? Quoting Ralph Goers : Removing JndiLookup helps by preventing the JNDI attack. You absolutely need to do this if you do no

Re: Log4j issue

2021-12-19 Thread bab
I searched ${ctx:somekey} in the log4j-config.xsd file but could not find anything . Is that means that is enough If we upgrade to 2.17 or just remove the class file? Quoting Ralph Goers : Removing JndiLookup helps by preventing the JNDI attack. You absolutely need to do this if you do n

Re: Log4j issue

2021-12-19 Thread Ralph Goers
Removing JndiLookup helps by preventing the JNDI attack. You absolutely need to do this if you do not upgrade. For item 2 look at your log4j2 configuration file. If it contains ${ctx:somekey} then you need to understand how somekey is being populated. I would venture to guess that most Log4j2 c

Re: log4j issue

2011-07-27 Thread Sivaks
Thanks james!! I removed ConsAppender and it worked!! Regards, siva James A. N. Stauffer wrote: > > ConsAppender sends the logs to standad output. > > James A. N. Stauffer        http://jamesjive.blogspot.com > Are you good? Take the test at http://www.livingwaters.com/good/ > > > > On We

Re: log4j issue

2011-07-27 Thread James A. N. Stauffer
ConsAppender sends the logs to standad output. James A. N. Stauffer        http://jamesjive.blogspot.com Are you good? Take the test at http://www.livingwaters.com/good/ On Wed, Jul 27, 2011 at 4:28 PM, Sivaks wrote: > > Hi, > > One of our old project has got lot of System.out.println statemen

Re: log4j issue

2005-09-26 Thread bussa srikanth
Hi James, ur reply helped me in exploring new things. thanks. say i already have an appender R defined in my log4j.properties to log to a local file, appender writes to a file log4j.appender.R=org.apache.log4j.RollingFileAppender log4j.appender.R.File=example.log # Control the maximum log fi

Re: log4j issue

2005-09-26 Thread Curt Arnold
On Sep 24, 2005, at 5:29 PM, kiran wrote: Hi All Apache logger has support for logging into files through file appender. But, if my log file is existing on a different machine on the "intranet" and the log4j's logger is running on a different machine, how should i specify that network lo

Re: log4j issue

2005-09-26 Thread James Stauffer
1. Just make the remote location accessible through some type of share or use a SocketAppender and socket server. 2. There are a few different ways of defining conditions. What kind of condition do you want? On 9/24/05, kiran <[EMAIL PROTECTED]> wrote: > Hi All > > Apache logger has support for