Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: Solr Optimization failed

EDR: Solr Optimization failed

Environment

  • EDR(Formerly Carbon Black Response) Server: All Supported Versions

Symptoms

 
  • Solr Optimization failed
  • Under /var/log/cb/job-runner/job-runner.log
[solr_optimize] Failed request http://127.0.0.1:8080/solr/admin/cores?action=STATUS&wt=json&indexInfo=true: 403
  • Manual accessing of Solr cores using curl fails.
curl "http://127.0.0.1:8080/solr/admin/cores?action=STATUS&wt=json&indexInfo=true&indent=true" | grep 'name\|size\|segmentCount' | grep -v sizeInBytes

% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  2470  100  2470    0     0   473k      0 --:--:-- --:--:-- --:--:--  603k
  font-size: 14px;
  font-size: 18px;
  font-size: 12px;
  font-size: 14px;
Username: <br />

Cause

 
  • Solr optimize failed to complete because of permission denied on 127.0.0.1
  • Localhost and 127.0.0.1 not excluded from the proxy.

Resolution

  • Edit /etc/environment
  • Add 127.0.0.1 to no_proxy
Example:
no_proxy=localhost,127.0.0.1
  • Save the file

Additional Notes

  • Check $no_proxy returns localhost,127.0.0.1, use the following command 
echo $no_proxy

 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-30-2021
Views:
324
Contributors