This isn't because Log4j is doing anything wrong; this is because of increased scrutiny and eyeballs.
I do not envy the team having to work under this microscope :(
Conversation
Replying to
It sort of makes you wonder the value of open source source over build your own.
3
1
Java has java.util.logging in the standard library which is a simple structured logging library. The default logging to stderr will get picked up by the service supervisor and sent to the system logging service. It's straightforward to have it use syslog directly instead.
It's included in the standard library, so you already have it without third party dependencies.
twitter.com/DanielMicay/st
No need to make your own. The main issue with the far more complex third party libraries is that they're rolling their own logging service as a library.
Quote Tweet
java.util.logging is easy to use and has everything you would ever need. If you want fancy processing/triggers, you should use rsyslog.
logger.warning("message");
logger.fine(() -> "lazy evaluation: " + parameter);
That high-level API dynamically adds class/method name itself.
Show this thread