EDR: Do Not Use SolrEventPartitionManagementUseNewAlgorithm variable
book
Article ID: 286837
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
After adding SolrEventPartitionManagementUseNewAlgorithm=True to cb.conf, the Solr reader cores were removed. The writer core remains.
Cause
The feature SolrEventPartitionManagementUseNewAlgorithm in some environments does not work as designed.
Resolution
Refrain from using SolrEventPartitionManagementUseNewAlgorithm in cb.conf until further notice.
Additional Information
- The feature was introduced to EDR 7.5.0 to address the increasing use of multiple cbevents* partitions.
- The configuration variable is a hidden variable and is not listed in the Server Configuration Guides.
- There have been two cases where the variable removed the current Solr cbevents cores.
- The algorithm fix is expected in EDR v7.8.1
Feedback
thumb_up
Yes
thumb_down
No