diff --git a/buildSrc/version.properties b/buildSrc/version.properties
index 2e887267854f9..410bbc136be5b 100644
--- a/buildSrc/version.properties
+++ b/buildSrc/version.properties
@@ -13,8 +13,7 @@ jackson           = 2.12.5
 snakeyaml         = 1.26
 icu4j             = 62.1
 supercsv          = 2.4.0
-# when updating log4j, please update also docs/java-api/index.asciidoc
-log4j             = 2.11.1
+log4j             = 2.15.0
 slf4j             = 1.6.2
 
 # when updating the JNA version, also update the version in buildSrc/build.gradle
diff --git a/plugins/discovery-azure-classic/build.gradle b/plugins/discovery-azure-classic/build.gradle
index b340823fa2404..8aac387cea6bf 100644
--- a/plugins/discovery-azure-classic/build.gradle
+++ b/plugins/discovery-azure-classic/build.gradle
@@ -122,6 +122,7 @@ tasks.named("dependencyLicenses").configure {
 tasks.named("thirdPartyAudit").configure {
 
   ignoreMissingClasses(
+  'javax.jms.Message',
   'javax.servlet.ServletContextEvent',
   'javax.servlet.ServletContextListener',
   'org.apache.avalon.framework.logger.Logger',
diff --git a/plugins/discovery-azure-classic/licenses/log4j-1.2-api-2.11.1.jar.sha1 b/plugins/discovery-azure-classic/licenses/log4j-1.2-api-2.11.1.jar.sha1
deleted file mode 100644
index 575d75dbda8c5..0000000000000
--- a/plugins/discovery-azure-classic/licenses/log4j-1.2-api-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-3aba3398fe064a3eab4331f88161c7480e848418
\ No newline at end of file
diff --git a/plugins/discovery-azure-classic/licenses/log4j-1.2-api-2.15.0.jar.sha1 b/plugins/discovery-azure-classic/licenses/log4j-1.2-api-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..2dc80601173be
--- /dev/null
+++ b/plugins/discovery-azure-classic/licenses/log4j-1.2-api-2.15.0.jar.sha1
@@ -0,0 +1 @@
+bc960fe2acbe6f3952011f88a771de18301534e7
\ No newline at end of file
diff --git a/plugins/discovery-ec2/build.gradle b/plugins/discovery-ec2/build.gradle
index 2c7673dae4f59..a6d4134d15a9b 100644
--- a/plugins/discovery-ec2/build.gradle
+++ b/plugins/discovery-ec2/build.gradle
@@ -133,6 +133,7 @@ tasks.named("check").configure {
 tasks.named("thirdPartyAudit").configure {
   ignoreMissingClasses(
           // classes are missing
+          'javax.jms.Message',
           'com.amazonaws.jmespath.JmesPathEvaluationVisitor',
           'com.amazonaws.jmespath.JmesPathExpression',
           'com.amazonaws.jmespath.JmesPathField',
diff --git a/plugins/discovery-ec2/licenses/log4j-1.2-api-2.11.1.jar.sha1 b/plugins/discovery-ec2/licenses/log4j-1.2-api-2.11.1.jar.sha1
deleted file mode 100644
index 575d75dbda8c5..0000000000000
--- a/plugins/discovery-ec2/licenses/log4j-1.2-api-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-3aba3398fe064a3eab4331f88161c7480e848418
\ No newline at end of file
diff --git a/plugins/discovery-ec2/licenses/log4j-1.2-api-2.15.0.jar.sha1 b/plugins/discovery-ec2/licenses/log4j-1.2-api-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..2dc80601173be
--- /dev/null
+++ b/plugins/discovery-ec2/licenses/log4j-1.2-api-2.15.0.jar.sha1
@@ -0,0 +1 @@
+bc960fe2acbe6f3952011f88a771de18301534e7
\ No newline at end of file
diff --git a/plugins/discovery-gce/build.gradle b/plugins/discovery-gce/build.gradle
index 0075b35a00eb9..01c48f9a9df83 100644
--- a/plugins/discovery-gce/build.gradle
+++ b/plugins/discovery-gce/build.gradle
@@ -57,6 +57,7 @@ test {
 
 thirdPartyAudit.ignoreMissingClasses(
   // classes are missing
+  'javax.jms.Message',
   'com.google.common.base.Splitter',
   'com.google.common.collect.Lists',
   'javax.servlet.ServletContextEvent',
diff --git a/plugins/discovery-gce/licenses/log4j-1.2-api-2.11.1.jar.sha1 b/plugins/discovery-gce/licenses/log4j-1.2-api-2.11.1.jar.sha1
deleted file mode 100644
index 575d75dbda8c5..0000000000000
--- a/plugins/discovery-gce/licenses/log4j-1.2-api-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-3aba3398fe064a3eab4331f88161c7480e848418
\ No newline at end of file
diff --git a/plugins/discovery-gce/licenses/log4j-1.2-api-2.15.0.jar.sha1 b/plugins/discovery-gce/licenses/log4j-1.2-api-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..2dc80601173be
--- /dev/null
+++ b/plugins/discovery-gce/licenses/log4j-1.2-api-2.15.0.jar.sha1
@@ -0,0 +1 @@
+bc960fe2acbe6f3952011f88a771de18301534e7
\ No newline at end of file
diff --git a/plugins/repository-gcs/build.gradle b/plugins/repository-gcs/build.gradle
index 50f79b11c7bf4..e68c83874427b 100644
--- a/plugins/repository-gcs/build.gradle
+++ b/plugins/repository-gcs/build.gradle
@@ -204,6 +204,7 @@ thirdPartyAudit {
     'org.apache.http.protocol.HttpProcessor',
     'org.apache.http.protocol.HttpRequestExecutor',
     // commons-logging provided dependencies
+    'javax.jms.Message',
     'javax.servlet.ServletContextEvent',
     'javax.servlet.ServletContextListener',
   )
diff --git a/plugins/repository-gcs/licenses/log4j-1.2-api-2.11.1.jar.sha1 b/plugins/repository-gcs/licenses/log4j-1.2-api-2.11.1.jar.sha1
deleted file mode 100644
index 575d75dbda8c5..0000000000000
--- a/plugins/repository-gcs/licenses/log4j-1.2-api-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-3aba3398fe064a3eab4331f88161c7480e848418
\ No newline at end of file
diff --git a/plugins/repository-gcs/licenses/log4j-1.2-api-2.15.0.jar.sha1 b/plugins/repository-gcs/licenses/log4j-1.2-api-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..2dc80601173be
--- /dev/null
+++ b/plugins/repository-gcs/licenses/log4j-1.2-api-2.15.0.jar.sha1
@@ -0,0 +1 @@
+bc960fe2acbe6f3952011f88a771de18301534e7
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/log4j-slf4j-impl-2.11.1.jar.sha1 b/plugins/repository-hdfs/licenses/log4j-slf4j-impl-2.11.1.jar.sha1
deleted file mode 100644
index 6178556b31848..0000000000000
--- a/plugins/repository-hdfs/licenses/log4j-slf4j-impl-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-4b41b53a3a2d299ce381a69d165381ca19f62912
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/log4j-slf4j-impl-2.15.0.jar.sha1 b/plugins/repository-hdfs/licenses/log4j-slf4j-impl-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..1f976e2cc5aa2
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/log4j-slf4j-impl-2.15.0.jar.sha1
@@ -0,0 +1 @@
+8bb417869ab3baa19f2fc70e6d776d041f0a8ebc
\ No newline at end of file
diff --git a/plugins/repository-s3/build.gradle b/plugins/repository-s3/build.gradle
index c4c8bce8b051a..1ebd6c5c50ffe 100644
--- a/plugins/repository-s3/build.gradle
+++ b/plugins/repository-s3/build.gradle
@@ -307,6 +307,7 @@ tasks.named("check").configure { dependsOn(s3ThirdPartyTest) }
 
 thirdPartyAudit.ignoreMissingClasses(
   // classes are missing
+  'javax.jms.Message',
   'javax.servlet.ServletContextEvent',
   'javax.servlet.ServletContextListener',
   'org.apache.avalon.framework.logger.Logger',
diff --git a/plugins/repository-s3/licenses/log4j-1.2-api-2.11.1.jar.sha1 b/plugins/repository-s3/licenses/log4j-1.2-api-2.11.1.jar.sha1
deleted file mode 100644
index 575d75dbda8c5..0000000000000
--- a/plugins/repository-s3/licenses/log4j-1.2-api-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-3aba3398fe064a3eab4331f88161c7480e848418
\ No newline at end of file
diff --git a/plugins/repository-s3/licenses/log4j-1.2-api-2.15.0.jar.sha1 b/plugins/repository-s3/licenses/log4j-1.2-api-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..2dc80601173be
--- /dev/null
+++ b/plugins/repository-s3/licenses/log4j-1.2-api-2.15.0.jar.sha1
@@ -0,0 +1 @@
+bc960fe2acbe6f3952011f88a771de18301534e7
\ No newline at end of file
diff --git a/server/build.gradle b/server/build.gradle
index 7bfd51ddaf8b0..5390f77c20509 100644
--- a/server/build.gradle
+++ b/server/build.gradle
@@ -291,13 +291,11 @@ tasks.named("thirdPartyAudit").configure {
             'org.apache.commons.compress.utils.IOUtils',
             'org.apache.commons.csv.CSVFormat',
             'org.apache.commons.csv.QuoteMode',
-            'org.apache.kafka.clients.producer.Callback',
             'org.apache.kafka.clients.producer.KafkaProducer',
             'org.apache.kafka.clients.producer.Producer',
             'org.apache.kafka.clients.producer.ProducerRecord',
             'org.apache.kafka.clients.producer.RecordMetadata',
             'org.codehaus.stax2.XMLStreamWriter2',
-            'org.jctools.queues.MessagePassingQueue$Consumer',
             'org.jctools.queues.MpscArrayQueue',
             'org.osgi.framework.AdaptPermission',
             'org.osgi.framework.AdminPermission',
diff --git a/server/licenses/log4j-api-2.11.1.jar.sha1 b/server/licenses/log4j-api-2.11.1.jar.sha1
deleted file mode 100644
index 4b1bfffac179f..0000000000000
--- a/server/licenses/log4j-api-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-268f0fe4df3eefe052b57c87ec48517d64fb2a10
\ No newline at end of file
diff --git a/server/licenses/log4j-api-2.15.0.jar.sha1 b/server/licenses/log4j-api-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..a699db85f74ec
--- /dev/null
+++ b/server/licenses/log4j-api-2.15.0.jar.sha1
@@ -0,0 +1 @@
+4a5aa7e55a29391c6f66e0b259d5189aa11e45d0
\ No newline at end of file
diff --git a/server/licenses/log4j-core-2.11.1.jar.sha1 b/server/licenses/log4j-core-2.11.1.jar.sha1
deleted file mode 100644
index 2fb8589380a03..0000000000000
--- a/server/licenses/log4j-core-2.11.1.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-592a48674c926b01a9a747c7831bcd82a9e6d6e4
\ No newline at end of file
diff --git a/server/licenses/log4j-core-2.15.0.jar.sha1 b/server/licenses/log4j-core-2.15.0.jar.sha1
new file mode 100644
index 0000000000000..b0ab8d9f40fde
--- /dev/null
+++ b/server/licenses/log4j-core-2.15.0.jar.sha1
@@ -0,0 +1 @@
+ba55c13d7ac2fd44df9cc8074455719a33f375b9
\ No newline at end of file