--- ./bin/solr.in.sh	2021-12-12 10:15:40.000000000 -0500
+++ ./bin/solr.in.sh	2021-12-12 10:17:50.000000000 -0500
@@ -100,6 +100,10 @@
 #SOLR_OPTS="$SOLR_OPTS -Dsolr.autoSoftCommit.maxTime=3000"
 #SOLR_OPTS="$SOLR_OPTS -Dsolr.autoCommit.maxTime=60000"
 
+# log4j vulnerability CVE-2021-44228
+# https://github.com/apache/solr/pull/454#issuecomment-991169501
+SOLR_OPTS="$SOLR_OPTS -Dlog4j2.formatMsgNoLookups=true"
+
 # Location where the bin/solr script will save PID files for running instances
 # If not set, the script will create PID files in $SOLR_TIP/bin
 #SOLR_PID_DIR=
