EDR: Cb-Solr Process is Not Creating a Debug Log File

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Solr process is not creating a new debug.log file in /var/log/cb/solr
• Solr is not creating a new core file in /var/cb/data 
• Not all services start as expected on the server
• The following error messages are seen in the /var/log/cb/solr/startup_out file

  SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder"
  SLF4J: Defaulting to no-operation (NOP) logger implementation
  SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further detail 

Environment

• EDR Server: 7.5.0

Cause

The steps in this article EDR: How to add the Log4j Mitigation may not have completed successfully

Resolution

Verify that the steps in the Log4J Mitigation article completes successfully