fix: Clean up Apache Lucene logging via SLF4j redirect (#7979)

Signed-off-by: Chad Wilson <[email protected]>

Author: chadlwilson

cli/src/main/resources/logback.xml

@@ -10,6 +10,7 @@
         </encoder>
     </appender>
 
+    <logger name="org.apache.lucene" level="ERROR" />
     <logger name="org.apache.commons.jcs" level="ERROR" />
     <logger name="org.apache.hc" level="ERROR" />
 

core/pom.xml

@@ -279,6 +279,11 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved.
             <groupId>org.apache.lucene</groupId>
             <artifactId>lucene-queryparser</artifactId>
         </dependency>
+        <!-- Allow redirection of lucene logs to slf4j -->
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>jul-to-slf4j</artifactId>
+        </dependency>
         <dependency>
             <groupId>org.apache.velocity</groupId>
             <artifactId>velocity-engine-core</artifactId>

core/src/main/java/org/owasp/dependencycheck/data/cpe/AbstractMemoryIndex.java

@@ -50,6 +50,7 @@
 import org.owasp.dependencycheck.utils.Settings;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
+import org.slf4j.bridge.SLF4JBridgeHandler;
 
 /**
  * <p>
@@ -67,6 +68,12 @@
 @ThreadSafe
 public abstract class AbstractMemoryIndex implements MemoryIndex {
 
+    static {
+        // Ensure Lucene uses SLF4J for logging
+        SLF4JBridgeHandler.removeHandlersForRootLogger();
+        SLF4JBridgeHandler.install();
+    }
+
     /**
      * The logger.
      */

pom.xml

@@ -1255,7 +1255,7 @@ Copyright (c) 2012 - Jeremy Long
             </dependency>
             <dependency>
                 <groupId>org.slf4j</groupId>
-                <artifactId>slf4j-simple</artifactId>
+                <artifactId>jul-to-slf4j</artifactId>
                 <version>${slf4j.version}</version>
             </dependency>
             <dependency>