[TINKERPOP-1983] Update Log4j to Log4j2

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Won't Do
• Affects Version/s: 3.3.3
• Component/s: build-release
• Assignee: Unassigned
• Reporter: Florian Hockmann
• Created: 11/Jun/18 14:42
• Updated: 03/Mar/22 13:37
• Resolved: 31/Jul/18 15:12

Description

TinkerPop uses Log4j version 1.2.17 but Log4j 1 reached end of life almost three years ago:

On August 5, 2015 the Logging Services Project Management Committee announced that Log4j 1.x had reached end of life.

Source: http://logging.apache.org/log4j/1.2/

It would be great if we could update to Log4j2 as it brings some nice benefits like new logging layouts for example (one of them is the JSON layout which is very useful to have to collect logs in something like the ELK stack or Graylog).

Issue Links

• is related to: TINKERPOP-2534 Log4j flagged as critical security violation
• is related to: TINKERPOP-2715 remove log4jv1 dependency