Upgrade Amazon Corretto Java

In certain situations, a software scan may determine that a vulnerability can be solved by updating your version of Amazon Corretto Java.

To update Amazon Corretto:

1. Verify the current version of Java by running the following command:

   CODE

   java -version

Make note of the version before updating so that a successful update can be verified later.

2. Download the latest version of Java 8 Linux x64 JDK RPM from Amazon at the following link:
   https://docs.aws.amazon.com/corretto/latest/corretto-8-ug/downloads-list.html

3. Save this file to the /home/logrhythm/ directory using WinSCP or a similar tool.

4. Stop Data Indexer services using the following command:

   CODE

   sudo sh /usr/local/logrhythm/tools/stop-all-services-linux.sh

5. Install the updated Corretto version using yum as a local install:

   CODE

   cd /home/logrhythm
   sudo yum localinstall java-1.8.0-amazon-corretto-xxx.rpm

   Yum will ask to validate dependencies and whether to proceed with the installation.

6. Input Y and then press Enter to proceed.
   The installation completes successfully.

7. Verify the updated Java version using the following command:

   CODE

   java -version

8. Restart all Data Indexer services using the following command:

   CODE

   sudo sh /usr/local/logrhythm/tools/start-all-services-linux.sh

The version of Java released with the Data Indexer by default is the version upon which LogRhythm has performed full testing and validation. Versions outside of the release version (i.e., any version downloaded using the steps in this guide) should be compatible with the Data Indexer, but this is not guaranteed.