diff --git a/elasticsearch/files/v6/jvm.options b/elasticsearch/files/v6/jvm.options
index f0dd096..bf3b30b 100644
--- a/elasticsearch/files/v6/jvm.options
+++ b/elasticsearch/files/v6/jvm.options
@@ -72,6 +72,8 @@
 -Dlog4j.shutdownHookEnabled=false
 -Dlog4j2.disable.jmx=true
 -Dlog4j.skipJansi=true
+# mitigate information leak
+-Dlog4j2.formatMsgNoLookups=true
 
 ## heap dumps