EDR: Solr Upgrade Fails With "Format Version is Not Supported"

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• When upgrading to 7.x and Higher from an older version the SOLR upgrade fails with Error referring to an index path
• Exception in thread "main" org.apache.lucene.index.IndexFormatTooNewException: Format version is not supported
• Including message 10 (needs to be between 0 and 6)

Environment

• EDR Server: 7.4.x and Higher
• RHEL/CentOS: All Supported Versions

Cause

This can happen if the original upgrade was interrupted leaving a partially upgraded index file which the upgrade script is not expecting

Resolution

1. Confirm the date of the indicated index file is from the time of upgrade
2. If so move the index file to another location
3. Rerun /usr/share/cb/cbupgrade to complete the upgrade