Multiple solr instances per host vs Multiple cores in same solr instance

2018-08-25 Thread Wei
Hi, I have a question about the deployment configuration in solr cloud. When we need to increase the number of shards in solr cloud, there are two options: 1. Run multiple solr instances per host, each with a different port and hosting a single core for one shard. 2. Run one solr instance per

Re: Solr core corrupted for version 7.4.0, please help!

2018-08-25 Thread Erick Erickson
Well, how it's marked really has little to do with whether it gets addressed or not. The nature of Open Source software is that it's, well, open. If this is a big enough pain point for you, you can pull the code and fix it. Whether you then submit a patch for review/commit is up to you. There are

Re: LOG4J_CONFIG/LOG4J_PROPS inconsistencies between linux and windows

2018-08-25 Thread Erick Erickson
Hmmm, I see what you mean. If you'd be kind enough to submit a patch that'd be great, attach it to a JIRA and ping people to get it applied. Glancing quickly it looks like there are a number of things in solr.in.sh that are not in solr.in.cmd, certainly a _lot_ of the Solr devs are *nix sorts so t

Re: solr.cmd solr-*.port files

2018-08-25 Thread Erick Erickson
Why would it be "nice"? What is the operational issue that would be made easier/better? Patches welcome of course if you want to attach one to a JIRA. Best, Erick On Fri, Aug 24, 2018 at 4:00 PM dshih wrote: > > SOLR 7.4.0 > > On Windows, solr.cmd creates solr-*.port files in SOLR_TIP\bin. I

Re: solr crypto mining hack...

2018-08-25 Thread Erick Erickson
This is probably CVE-2017-12629, see SOLR-11482, SOLR-11477 for specific versions that have been patched and upgrade. You also need to, as Jan suggested, figure out a way to be absolutely sure that your installation is cleaned before you can be sure that you're protected. Also see: https://www.bl

Re: solr crypto mining hack...

2018-08-25 Thread Tim Casey
I am not sure how solr is exactly set up currently, much less on any specific system. But, for operations which are largely reading, *maybe* like a query, you might be able run on a read only partition. A firewall is a lot less work and a good start, like 90% of the problem. To do this, you brin

Re: solr crypto mining hack...

2018-08-25 Thread Shawn Heisey
On 8/25/2018 12:59 PM, humanitarian wrote: I am struggling to fight an attack were the solr user is being used to crate files used for mining cryptocurrencies. The files are being created in the /var/tmp and /tmp folders. It will use 100% of the CPU. I am looking for help in stopping these atta

Re: solr crypto mining hack...

2018-08-25 Thread Walter Underwood
What version of Solr are you running? On what OS? With what version of Java? wunder Walter Underwood wun...@wunderwood.org http://observer.wunderwood.org/ (my blog) > On Aug 25, 2018, at 11:59 AM, humanitarian wrote: > > Hi All, > > I am struggling to fight an attack were the solr user is bei

solr crypto mining hack...

2018-08-25 Thread humanitarian
Hi All, I am struggling to fight an attack were the solr user is being used to crate files used for mining cryptocurrencies. The files are being created in the /var/tmp and /tmp folders. It will use 100% of the CPU.  I am looking for help in stopping these attacks. All files are created under t