kafka版本是kafka_2.11-2.0.0,由于引用的log4j有漏洞,而升级kafka可能影响比较大,所以更新log4j包的版本。
主要步骤如下:
- cd kafka的目录
- cd libs
- rm -f slf4j-log4j12-1.7.25.jar
- rm -f slf4j-api-1.7.25.jar
- rm -f log4j-1.2.17.jar
- wget https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-1.2-api/2.13.2/log4j-1.2-api-2.13.2.jar
- wget https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-api/2.13.2/log4j-api-2.13.2.jar
- wget https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.13.2/log4j-core-2.13.2.jar
- wget https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-slf4j-impl/2.13.2/log4j-slf4j-impl-2.13.2.jar
- wget https://repo1.maven.org/maven2/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar
-
-
-
- 将bin/zookeeper-server-start.sh文件中
- export KAFKA_LOG4J_OPTS="-Dlog4j.configuration=file:$base_dir/../config/log4j.properties" 修改成:
- export KAFKA_LOG4J_OPTS="-Dlog4j.configuration=file:$base_dir/../config/log4j.properties -Dzookeeper.jmx.log4j.disable=true"
针对参考文章的补充:
- log4j.appender.kafkaAppender.File=${kafka.logs.dir}/server.log
- 改成了
- log4j.appender.kafkaAppender.File=kafka的目录/logs/server.log