log4j – upgrading to Elastic 6.8.22

Solved794 views
2
0 Comments

Hi,

To mitigate log4j vulnerabilities, should we follow the instructions detailed here https://www.elastic.co/guide/en/elasticsearch/reference/6.8/rolling-upgrades.html or is the process a bit more involved for DM?

Thanks

Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 17th July 2023

2 Answers

2
2.71K 2 Comments

Hi Chris,

We are currently validating the procedure to update Elastic, I will get back to you when it's complete. We expect to have it in the coming days.

Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 17th July 2023
Thomas Deweer [SLC] commented

Hello Chris, guide available at: https://community.dataminer.services/documentation/upgrading-elasticsearch-from-one-minor-version-to-another/
This is for windows 🙂 It’s more elaborate than the guide you linked. However, for linux, we can only endorse the guide you linked
2
286 1 Comment

Hello Chris,

Please check the following link: https://community.dataminer.services/responding-to-log4shell-vulnerability/.

We are working on a guide to help you with the update of Elastic.

Chris Glover [DevOps Advocate] Posted new comment 20th December 2021
Chris Glover [DevOps Advocate] commented

I had, hence my question!
We’re getting pressure from our IT security teams to resolve this.