Hello, Unfortunately, there is no version of Ambari, supported by Cloudera, that has log4j1 removed or fixed as it was for log4j2. That script was made as a temp workaround while we upgraded log4j2 in our products.   The log4j1 package is used by almost all components.  It can not be removed.  Cloudera also does not support removing any classes from the JAR as they may be used by the services as well and it has never been vetted or verified. The proper path here is an upgrade to a current version of CDP where Log4j has been completely replaced with reload4j. If you have any questions please contact us via one of the methods listed here: https://www.cloudera.com/contact-sales.html Regards, Cloudera Support ... View more