The Apache Software Foundation does not employ individuals to develop and support any of its projects. The individuals who contribute to Apache projects do it either as part of specific tasks assigned to them by their employer, on their own initiative to benefit their employer, or on their own free time.


Apache Log4j project officially uses following mailing lists for discussions: (public | subscribe | unsubscribe | post | archive)

For questions related to the usage of Log4j components (public | subscribe | unsubscribe | post | archive)

For development discussions (Please prefix subjects with [log4j] when starting a new thread!) (private | post)

For reporting unlisted security vulnerabilities or other unexpected behaviour that has a security impact (private | post)

For the discussion of confidential topics within the Apache Logging Services project management committee

You can alternatively post questions on Stack Overflow tagged with either log4j or log4j2. Note that Stack Overflow is more casually monitored due to time constraints. It is fine if you want to post first to Stack Overflow and then if you don’t get an answer to post to the mailing lists.


The Log4j project uses GitHub Issues as its issue tracking system. The old issue tracking system, JIRA, is still accessible, though only recommended for issues that were already created there.

Issues get resolved in one of the following ways:

  1. The reporter or another interested party provides a pull request tagging the issue in its title

  2. A committer is interested in the issue and decides to work on it

  3. The reporter or another interested party sponsors one or more of the committers listed below to encourage them to work on the issue

Created issues are subject to the following policy:


Issues posted of insufficient quality will be removed

No protracted discussions

Issues likely to result in protracted discussion must be posted to the mailing lists

No Questions

Do not post questions as issues! These will be removed, and you will be asked to post questions to the mailing lists instead.


Sponsorship can be used simply as a way to say thank you for the work that has been done or as a way to encourage specific issues to be worked on. In either case, while the Apache Logging Services project thanks you for your support, we cannot be responsible for any promises and/or contributions made by an individual committer, as individual commits must be reviewed and accepted by the project team.

Third-party commercial support

While neither the Apache Software Foundation nor the Apache Logging Services project provide any commercial support for the Log4j products, individual committers may collaborate with services that provide such support.

The following aims to be a list of all commercial support services involving one or more Log4j committers.


Some Log4j maintainers receive funding from Tidelift for their maintenance efforts. See the Tidelift website for details.