Upgrade Amazon Corretto Java

In certain situations, a software scan may determine that a vulnerability can be solved by updating your version of Amazon Corretto Java.

Windows Update Instructions

The following sections describe the process for updating Amazon Corretto Java on Windows devices.

Windows DX Instructions

To update Amazon Corretto for Windows DX:

1. Verify the current version of Java by running the following command in a Command Prompt window:

   CODE

   "C:\Program Files\LogRhythm\Data Indexer\dependencies\jre\bin\java" -version

Make note of the version before updating so that a successful update can be verified later.

2. Download the latest version of Java 8 Windows x64 JRE ZIP from Amazon at the following link:
   Amazon Corretto Java for Windows

3. Stop all LogRhythm DX services via the Services window, or by running the following in an admin Command Prompt window:

   CODE

   "C:\Program Files\LogRhythm\Data Indexer\tools\stop-all-services.bat"

4. Locate the zip file downloaded in Step 2 in your Downloads folder, then right-click the file and select “Extract All…”

5. Rename the jre8 folder in the extracted files to “jre”.

6. Navigate to C:\Program Files\LogRhythm\Data Indexer\dependencies.

7. Rename the existing jre folder to “jre.bak”.

8. Copy the jre folder that you renamed in Step 5 to the dependencies folder.

9. Verify the updated Java version using the following command:

   CODE

   "C:\Program Files\LogRhythm\Data Indexer\dependencies\jre\bin\java" -version

10. Restart all LogRhythm DX services via the Services window, or by running the following command:

    CODE

    "C:\Program Files\LogRhythm\Data Indexer\tools\start-all-services.bat"

The version of Java released with the Data Indexer by default is the version upon which LogRhythm has performed full testing and validation. Versions outside of the release version (i.e., any version downloaded using the steps in this guide) should be compatible with the Data Indexer, but this is not guaranteed.

Windows Web Console Instructions

To update Amazon Corretto for Web Console:

1. Verify the current version of Java by running the following command in a Command Prompt window:

   CODE

   "C:\Program Files\LogRhythm\LogRhythm Web Services\LogRhythm Web Indexer\dependencies\jre\bin\java" -version

Make note of the version before updating so that a successful update can be verified later.

2. Download the latest version of Java 8 Windows x64 JRE ZIP from Amazon at the following link:
   Amazon Corretto Java for Windows

3. Stop the LogRhythm Web Indexer service via the Services window.

4. Locate the zip file downloaded in Step 2 in your Downloads folder, then right-click the file and select “Extract All…”

5. Rename the jre8 folder in the extracted files to “jre”.

6. Navigate to C:\Program Files\LogRhythm\LogRhythm Web Services\LogRhythm Web Indexer\dependencies.

7. Rename the existing jre folder to “jre.bak”.

8. Copy the jre folder that you renamed in Step 5 to the dependencies folder

9. Verify the updated Java version using the following command:

   CODE

   "C:\Program Files\LogRhythm\LogRhythm Web Services\LogRhythm Web Indexer\dependencies\jre\bin\java" -version

10. Restart the LogRhythm Web Indexer service via the Services window.

Linux Update Instructions

To update Amazon Corretto for Linux DX:

1. Verify the current version of Java by running the following command:

   CODE

   java -version

Make note of the version before updating so that a successful update can be verified later.

2. Download the latest version of Java 8 Linux x64 JDK RPM from Amazon at the following link:
   Amazon Corretto Java for Linux

3. Save this file to the /home/logrhythm/ directory using WinSCP or a similar tool.

4. Stop Data Indexer services using the following command:

   CODE

   sudo sh /usr/local/logrhythm/tools/stop-all-services-linux.sh

5. Install the updated Corretto version using yum as a local install:

   CODE

   cd /home/logrhythm
   sudo yum localinstall java-1.8.0-amazon-corretto-xxx.rpm

   Yum will ask to validate dependencies and whether to proceed with the installation.

6. Input Y and then press Enter to proceed.
   The installation completes successfully.

7. Verify the updated Java version using the following command:

   CODE

   java -version

8. Restart all Data Indexer services using the following command:

   CODE

   sudo sh /usr/local/logrhythm/tools/start-all-services-linux.sh

The version of Java released with the Data Indexer by default is the version upon which LogRhythm has performed full testing and validation. Versions outside of the release version (i.e., any version downloaded using the steps in this guide) should be compatible with the Data Indexer, but this is not guaranteed.