EDR Server: How to manually create a core.properties file for a Solr core

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Create a core.properties file for a core that for any reason is missing it. 

Environment

• EDR Server: All Versions

Resolution

1. Create the file:
   • touch /var/cb/data/solr/cbevents/CORENAME/core.properties
2. Set the correct permissions:
   • chown cb:cb /var/cb/data/solr/cbevents/CORENAME/core.properties
3. Add the following content to the core.properties file where the name matches the name of the directory itself:

   • #Written by CarbonBlackSupport
     #CURRENTDATE
     name=cbevents_YYYYYYY
     configSet=cbevents_v2

4. Once core.properties have been created restart services

Additional Information

• Example
  1. touch /var/cb/data/solr/cbevents/cbevents_2017_08_14_1544/core.properties
  2. chown cb:cb /var/cb/data/solr/cbevents/cbevents_2017_08_14_1544/core.properties
  3. For the folder cbevents_2017_08_14_1544, the contents of core.properties will be set to

     • #Written by CarbonBlackSupport
       #CURRENTDATE
       name=cbevents_2017_08_14_1544
       configSet=cbevents_v2

       ​​​​