Is it possible to upgrade log4j1 to log4j2 for Automic?

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

Question:

Client has identified the use of log4j1 as a vulnerability due to support having been discontinued. Is it possible or advised to upgrade to log4j2, so that the server is in compliance?

Environment

Release : 12.X, 21

Component : Automation Engine

Cause

N/A

Resolution

Answer: no, you cannot upgrade log4j1 to log4j2. Future versions of Automic components will have upgraded libraries, but updating the libraries requires code changes and testing that cannot be done on the fly.