You couldn’t find it because there isn’t one! I know it’s important to a lot of folks but Jules does a great job explaining why it wasn’t feasible. We’re
Long story short - you should mitigate your clusters by removing the classpath as outlined on the Log4j site (or switch to another distribution of Open Distro, or, better yet, OpenSearch)