EDR: Hostname Facet Prevents Facets From Loading in Binary Search Page

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Hostname facets not loading in the binary search page. 
• Solr Debug.log. Clearly shows hostname facet is the cause.

  2020-02-14 06:51:18,651 - [ERROR] - from org.apache.solr.handler.RequestHandlerBase in qtp1358444045-140
  org.apache.solr.common.SolrException: Exception during facet.field: hostname
          at org.apache.solr.request.SimpleFacets$3.call(SimpleFacets.java:721)
          at org.apache.solr.request.SimpleFacets$3.call(SimpleFacets.java:706)
          at java.util.concurrent.FutureTask.run(FutureTask.java:266)
          at org.apache.solr.request.SimpleFacets$2.execute(SimpleFacets.java:660)
          at org.apache.solr.request.SimpleFacets.getFacetFieldCounts(SimpleFacets.java:731)
          at org.apache.solr.handler.component.FacetComponent.getFacetCounts(FacetComponent.java:294)
          at org.apache.solr.handler.component.FacetComponent.process(FacetComponent.java:256)
          at org.apache.solr.handler.component.SearchHandler.handleRequestBody(SearchHandler.java:272)
          at com.carbonblack.cbfs.solr.handler.CbSearchRequestHandlers$Base.handleRequestBody(CbSearchRequestHandlers.java:477)
          at com.carbonblack.cbfs.solr.handler.CbSearchRequestHandlers$Select.handleRequestBody(CbSearchRequestHandlers.java:539)
          at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:155)
          at org.apache.solr.core.SolrCore.execute(SolrCore.java:2102)
          at org.apache.solr.servlet.HttpSolrCall.execute(HttpSolrCall.java:654)
          at org.apache.solr.servlet.HttpSolrCall.call(HttpSolrCall.java:460)
          at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:257)
          at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:208)
          at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
          at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585)
          at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
          at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577)
          at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223)
          at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)
          at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)
          at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)
          at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)
          at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
          at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)
          at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110)
          at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
          at org.eclipse.jetty.server.Server.handle(Server.java:499)
          at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)
          at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
          at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
          at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
          at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
          at java.lang.Thread.run(Thread.java:748)
  Caused by: java.lang.IllegalStateException: Too many values for UnInvertedField faceting on field hostname
          at org.apache.lucene.uninverting.DocTermOrds.uninvert(DocTermOrds.java:489)
          at org.apache.lucene.uninverting.DocTermOrds.<init>(DocTermOrds.java:212)
          at org.apache.lucene.uninverting.DocTermOrds.<init>(DocTermOrds.java:203)
          at org.apache.lucene.uninverting.DocTermOrds.<init>(DocTermOrds.java:196)
          at org.apache.lucene.uninverting.FieldCacheImpl$DocTermOrdsCache.createValue(FieldCacheImpl.java:945)
          at org.apache.lucene.uninverting.FieldCacheImpl$Cache.get(FieldCacheImpl.java:189)
          at org.apache.lucene.uninverting.FieldCacheImpl.getDocTermOrds(FieldCacheImpl.java:932)
          at org.apache.lucene.uninverting.UninvertingReader.getSortedSetDocValues(UninvertingReader.java:274)
          at org.apache.lucene.index.FilterLeafReader.getSortedSetDocValues(FilterLeafReader.java:454)
          at org.apache.lucene.index.MultiDocValues.getSortedSetValues(MultiDocValues.java:356)
          at org.apache.lucene.index.SlowCompositeReaderWrapper.getSortedSetDocValues(SlowCompositeReaderWrapper.java:163)
          at org.apache.solr.request.DocValuesFacets.getCounts(DocValuesFacets.java:71)
          at org.apache.solr.request.SimpleFacets.getTermCounts(SimpleFacets.java:519)
          at org.apache.solr.request.SimpleFacets.getTermCounts(SimpleFacets.java:382)
          at org.apache.solr.request.SimpleFacets$3.call(SimpleFacets.java:715)

Environment

• EDR Versions Prior to Server 7.3.0.

Cause

SOLR defect.

Resolution

Upgrade to Server 7.3.0 or later.

Additional Information

https://issues.apache.org/jira/browse/SOLR-11240