Security scan on SpectroSERVER and OneClick systems flagged files in the $SPECROOT/Install-Tools/LOGS drectory

Products

• Spectrum
• Network Observability

Issue/Introduction

During a security scan on our SpectroSERVER and OneClick systems, files located in the $SPECROOT/Install-Tools/LOGS directory were flagged for the Apache Log4j SEoL vulnerability.

Can these files be deleted?

Environment

Version: ANY

Cause

When a Spectrum upgrade is performed, some files are saved from the previous Spectrum installation in the $SPECROOT/Install-Tools/LOGS/<Spectrum version>/SavedFiles.<TIMESTAMP> directory. The following is an example of a directory:

$SPECROOT/Install-Tools/LOGS/23.3.2.0.14_20231212/SavedFiles.08.41

Resolution

Files located in the $SPECROOT/Install-Tools/LOGS directory are only needed to troubleshoot installation issues.

After a successful installation, these files can be deleted.