Please advise where we can change the setting for the log4j to address the vulnerability

Please advise where i would find the below files to implement the mitigation .

At a high-level, what you need to know is:

1. This vulnerability was publicly announced today.
2. We strongly recommend you take the following steps to ensure the security of your data and website(s):

• Mitigation:
• In your project pom, please update your log4j version to 2.15.0: <log4j2.version>2.15.0</log4j2.version>

• Temporary Mitigation:
• Modify every logging pattern layout in your logging config files, replace %m with %m{nolookups}, see details at https://issues.apache.org/jira/browse/LOG4J2-2109

1. Additional information regarding the vulnerability can be here.