Re: CVE-2019-17558 on SOLR 6.1

2021-02-12 Thread Shawn Heisey
On 2/12/2021 11:17 AM, Rick Tham wrote: I am trying to figure out if the following is an additioanal valid mitigation step for CVE-2019-17558 on SOLR 6.1. None of our solrconfig.xml contains the lib references to the velocity jar files as follows: l It doesn't appear that you can add these

Re: Extremely Small Segments

2021-02-12 Thread Shawn Heisey
On 2/12/2021 4:30 AM, yasoobhaider wrote: Note: Nothing out of the ordinary in logs. Only /update request logs. Can you share your logs? The best option would be to include everything in the logs directory. Hopefully you have not altered the default logging config, which sets the detail to

Re: Why Solr questions on stackoverflow get very few views and answers, if at all?

2021-02-12 Thread Walter Underwood
Many questions have responses as comments, but no actual answers. One frequent contributor doesn’t understand how StackOverflow works, so he’s posting answers as comments. He’s also doing conversations instead of crafting a useful, complete answer. I just answered a few. Mostly with “don’t use

Re: Elevation in dataDir in Solr Cloud

2021-02-12 Thread Chris Hostetter
: I need to have the elevate.xml file updated frequently and I was wondering : if it is possible to put this file in the dataDir folder when using Solr : Cloud. I know that this is possible in the standalone mode, and I haven't : seen in the documentation [1] that it can not be done in Cloud. :

CVE-2019-17558 on SOLR 6.1

2021-02-12 Thread Rick Tham
We are using Solr 6.1 and at the moment we can not upgrade due to application dependencies. We have mitigation steps in place to only trust specific machines within our DMZ. I am trying to figure out if the following is an additioanal valid mitigation step for CVE-2019-17558 on SOLR 6.1. None of

Re: [ANNOUNCE] Apache Solr 8.8.0 released

2021-02-12 Thread Ishan Chattopadhyaya
Hi all, This release contains a critical bug, that should be fixed in 8.8.1 shortly. Please avoid upgrading to this release for the moment. https://twitter.com/ichattopadhyaya/status/1360163382171586562 Apologies for the inconvenience. Thanks, Ishan On Mon, Feb 1, 2021 at 6:01 PM Noble Paul

Re: SOLR upgrade

2021-02-12 Thread David Hastings
i generally will only upgrade every other release. since i started with 1.4, went to 3->5->7.X, and never EVER a .0 or an even .X release, On Fri, Feb 12, 2021 at 12:01 PM Ishan Chattopadhyaya < ichattopadhy...@gmail.com> wrote: > Just avoid 8.8.0 for the moment, until 8.8.1 is released. 8.7.x

Re: SOLR upgrade

2021-02-12 Thread Ishan Chattopadhyaya
Just avoid 8.8.0 for the moment, until 8.8.1 is released. 8.7.x should be fine. On Fri, Feb 12, 2021 at 10:28 PM Alessandro Benedetti wrote: > Hi, > following up on Charlie's detailed response I would recommend carefully > assess the code you are using to interact with Apache Solr (on top of

Re: SOLR upgrade

2021-02-12 Thread Alessandro Benedetti
Hi, following up on Charlie's detailed response I would recommend carefully assess the code you are using to interact with Apache Solr (on top of the Solr changes themselves). Assuming you are using some sort of client, it's extremely important to fully understand both the syntax and semantic of

Re: Extremely Small Segments

2021-02-12 Thread Alessandro Benedetti
Hi Yasoob, Can you check in the log when hard commits really happen? I ended up sometimes with auto soft/hard commit config in the wrong place of the solrconfig.xml and for that reason getting un-expected behaviour. Your assumptions are correct, the ramBuffer flushes as soon as one of the

Re: Asymmetric Key Size not sufficient

2021-02-12 Thread Ishan Chattopadhyaya
Recent versions of Solr use 2048. https://github.com/apache/lucene-solr/blob/branch_8_6/solr/core/src/java/org/apache/solr/util/CryptoKeys.java#L332 Thanks for your report. On Fri, Feb 12, 2021 at 3:44 PM Mahir Kabir wrote: > Hello, > > I am a Ph.D. student at Virginia Tech, USA. While working

Elevation in dataDir in Solr Cloud

2021-02-12 Thread Mónica Marrero
Hi, I need to have the elevate.xml file updated frequently and I was wondering if it is possible to put this file in the dataDir folder when using Solr Cloud. I know that this is possible in the standalone mode, and I haven't seen in the documentation [1] that it can not be done in Cloud. I am

Re: Why Solr questions on stackoverflow get very few views and answers, if at all?

2021-02-12 Thread samuel...@grupoinditex.mail.onmicrosoft.com


Re: Why Solr questions on stackoverflow get very few views and answers, if at all?

2021-02-12 Thread Alexandre Rafalovitch
I answered quite a bunch a whole ago, as part of book writing process. I think a lot of them were missing core information like version of Solr. So they were not very timeless. The list allows a conversation and multiple perspectives, which is better than a one shot answer. Regards, Alex On

Extremely Small Segments

2021-02-12 Thread samuel...@grupoinditex.mail.onmicrosoft.com


Extremely Small Segments

2021-02-12 Thread yasoobhaider
Hi I am migrating from master slave to Solr Cloud but I'm running into problems with indexing. Cluster details: 8 machines of 64GB memory, each hosting 1 replica. 4 shards, 2 replica of each. Heap size is 16GB. Collection details: Total number of docs: ~250k (but only 50k are indexed right

Extremely small segments

2021-02-12 Thread samuel...@grupoinditex.mail.onmicrosoft.com


Extremely small segments

2021-02-12 Thread Yasoob Haider
Hi I am migrating from master slave to Solr Cloud but I'm running into problems with indexing. Cluster details: 8 machines of 64GB memory, each hosting 1 replica. 4 shards, 2 replica of each. Heap size is 16GB. Collection details: Total number of docs: ~250k (but only 50k are indexed right

Re: Why Solr questions on stackoverflow get very few views and answers, if at all?

2021-02-12 Thread Charlie Hull
I've answered a few in my time, but my experience is that if you do so you then get emailed a whole load more questions some of which aren't even relevant to Solr! Also, quite a few of them are 'here is 3 pages of code please debug it for me no I won't tell the actual error I got'. This is

Why Solr questions on stackoverflow get very few views and answers, if at all?

2021-02-12 Thread ufuk yılmaz
Is it because the main place for q is this mailing list, or somewhere else that I don’t know? Or Solr isn’t ‘hot’ as some other topics? Sent from Mail for Windows 10

Asymmetric Key Size not sufficient

2021-02-12 Thread Mahir Kabir
Hello, I am a Ph.D. student at Virginia Tech, USA. While working on a security project-related work, we came across the following vulnerability in the source code - In file https://github.com/apache/lucene-solr/blob/branch_6_6/solr/core/src/java/org/apache/solr/util/CryptoKeys.java