elasticsearch-7.13.3 升级log4j 到log4j-2.17.1

1、升级原因
log4j低版本存在严重漏洞，根据需要升级到安全版本，不一定是最新。

log4j-2.17.1 jar包下载地址https://archive.apache.org/dist/logging/log4j/2.17.1/
2、下载后解压apache-log4j-2.17.1-bin.tar.gz
升级需要用到截图中四个jar包

3、升级
删除旧版本log4j
进入elasticsearch-7.13.3目录
$ rm -rf lib/log4j-core-2.11.1.jar
$ rm -rf lib/log4j-api-2.11.1.jar
$ rm -rf modules/x-pack-identity-provider/log4j-slf4j-impl-2.11.1.jar
$ rm -rf modules/repository-url/log4j-1.2-api-2.11.1.jar
$ rm -rf modules/x-pack-core/log4j-1.2-api-2.11.1.jar
$ rm -rf modules/x-pack-security/log4j-slf4j-impl-2.11.1.jar

4、将需要升级的包拷贝到对应目录
$ cp log4j-core-2.17.1.jar /home/elk/elasticsearch-7.13.3/lib/
$ cp /log4j-api-2.17.1.jar /home/elk/elasticsearch-7.13.3/lib
$ cp log4j-slf4j-impl-2.17.1.jar /home/elk/elasticsearch-7.13.3/modules/x-pack-identity-provider/
$ cp log4j-1.2-api-2.17.1.jar /home/elk/elasticsearch-7.13.3/modules/repository-url/
$ cp log4j-1.2-api-2.17.1.jar /home/elk/elasticsearch-7.13.3/modules/x-pack-core/
$ cp log4j-slf4j-impl-2.17.1.jar /home/elk/elasticsearch-7.13.3/modules/x-pack-security/
5、重新启动elasticsearch服务