I need to address the log4j vulnerability contained in Netcool/OMNIbus.

Can I delete the file '/opt/IBM/tivoli/netcool/omnibus/java/jars/log4j-1.2.8.jar' ?  

This jar file is found in the server where the EIF Probe is running. EIF Probe uses java, so I'm afraid that deleting it will affect the operation.

Ken,

Deleting the entire jar file will cause problems and is unnecessary to mitigate the issue. Here's what you need to do:

find / -name "log4j-core-*.jar" -exec zip -q -d {} org/apache/logging/log4j/core/lookup/JndiLookup.class \;
reboot

The above command will find all files named "log4j-core-*.jar" on the system and will remove the "JndiLookup.class" file from them. The 'reboot' is a fairly large hammer, but it will restart all processes on the box. Alternatively, you can stop and restart all java processes running on the server.

I need to address the log4j vulnerability contained in Netcool/OMNIbus.

Can I delete the file '/opt/IBM/tivoli/netcool/omnibus/java/jars/log4j-1.2.8.jar' ?  

This jar file is found in the server where the EIF Probe is running. EIF Probe uses java, so I'm afraid that deleting it will affect the operation.