diff --git a/docs/doxygen-user/images/solr/solr_adding_nodes_1.png b/docs/doxygen-user/images/solr/solr_adding_nodes_1.png
new file mode 100644
index 0000000000..72eda5b3eb
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_adding_nodes_1.png differ
diff --git a/docs/doxygen-user/images/solr/solr_adding_nodes_2.png b/docs/doxygen-user/images/solr/solr_adding_nodes_2.png
new file mode 100644
index 0000000000..f93324681d
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_adding_nodes_2.png differ
diff --git a/docs/doxygen-user/images/solr/solr_autopsy.png b/docs/doxygen-user/images/solr/solr_autopsy.png
new file mode 100644
index 0000000000..06aea11831
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_autopsy.png differ
diff --git a/docs/doxygen-user/images/solr/solr_autopsy_zk.png b/docs/doxygen-user/images/solr/solr_autopsy_zk.png
new file mode 100644
index 0000000000..53e61c17c1
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_autopsy_zk.png differ
diff --git a/docs/doxygen-user/images/solr/solr_config_case.png b/docs/doxygen-user/images/solr/solr_config_case.png
new file mode 100644
index 0000000000..b2e73468be
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_config_case.png differ
diff --git a/docs/doxygen-user/images/solr/solr_config_folder.png b/docs/doxygen-user/images/solr/solr_config_folder.png
new file mode 100644
index 0000000000..615e0903d5
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_config_folder.png differ
diff --git a/docs/doxygen-user/images/solr/solr_config_param.png b/docs/doxygen-user/images/solr/solr_config_param.png
new file mode 100644
index 0000000000..dbc81d0cb1
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_config_param.png differ
diff --git a/docs/doxygen-user/images/solr/solr_config_todo.png b/docs/doxygen-user/images/solr/solr_config_todo.png
new file mode 100644
index 0000000000..01c587dfff
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_config_todo.png differ
diff --git a/docs/doxygen-user/images/solr/solr_install_1.png b/docs/doxygen-user/images/solr/solr_install_1.png
new file mode 100644
index 0000000000..17b9359d69
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_install_1.png differ
diff --git a/docs/doxygen-user/images/solr/solr_install_2.png b/docs/doxygen-user/images/solr/solr_install_2.png
new file mode 100644
index 0000000000..fe2a9516ef
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_install_2.png differ
diff --git a/docs/doxygen-user/images/solr/solr_install_3.png b/docs/doxygen-user/images/solr/solr_install_3.png
new file mode 100644
index 0000000000..571312d5a5
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_install_3.png differ
diff --git a/docs/doxygen-user/images/solr/solr_install_4.png b/docs/doxygen-user/images/solr/solr_install_4.png
new file mode 100644
index 0000000000..6ff5fa8bcd
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_install_4.png differ
diff --git a/docs/doxygen-user/images/solr/solr_running_in_parallel.png b/docs/doxygen-user/images/solr/solr_running_in_parallel.png
new file mode 100644
index 0000000000..53e61c17c1
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_running_in_parallel.png differ
diff --git a/docs/doxygen-user/images/solr/solr_standalone_zk_1.png b/docs/doxygen-user/images/solr/solr_standalone_zk_1.png
new file mode 100644
index 0000000000..8ac44025e9
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_standalone_zk_1.png differ
diff --git a/docs/doxygen-user/images/solr/solr_standalone_zk_2.png b/docs/doxygen-user/images/solr/solr_standalone_zk_2.png
new file mode 100644
index 0000000000..ab64dcb392
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_standalone_zk_2.png differ
diff --git a/docs/doxygen-user/images/solr/solr_standalone_zk_3.png b/docs/doxygen-user/images/solr/solr_standalone_zk_3.png
new file mode 100644
index 0000000000..937a871f31
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_standalone_zk_3.png differ
diff --git a/docs/doxygen-user/images/solr/solr_standalone_zk_4.png b/docs/doxygen-user/images/solr/solr_standalone_zk_4.png
new file mode 100644
index 0000000000..744b478d69
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_standalone_zk_4.png differ
diff --git a/docs/doxygen-user/images/solr/solr_start_1.png b/docs/doxygen-user/images/solr/solr_start_1.png
new file mode 100644
index 0000000000..c17bb02a86
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_start_1.png differ
diff --git a/docs/doxygen-user/images/solr/solr_start_2.png b/docs/doxygen-user/images/solr/solr_start_2.png
new file mode 100644
index 0000000000..28a3825e46
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_start_2.png differ
diff --git a/docs/doxygen-user/images/solr/solr_testing_1.png b/docs/doxygen-user/images/solr/solr_testing_1.png
new file mode 100644
index 0000000000..6157dadf67
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_testing_1.png differ
diff --git a/docs/doxygen-user/images/solr/solr_user_1.png b/docs/doxygen-user/images/solr/solr_user_1.png
new file mode 100644
index 0000000000..31bbc855e3
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_user_1.png differ
diff --git a/docs/doxygen-user/images/solr/solr_user_2.png b/docs/doxygen-user/images/solr/solr_user_2.png
new file mode 100644
index 0000000000..8849a5e082
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_user_2.png differ
diff --git a/docs/doxygen-user/images/solr/solr_zk_migration_1.png b/docs/doxygen-user/images/solr/solr_zk_migration_1.png
new file mode 100644
index 0000000000..d85ba4e992
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_zk_migration_1.png differ
diff --git a/docs/doxygen-user/images/solr/solr_zk_migration_2.png b/docs/doxygen-user/images/solr/solr_zk_migration_2.png
new file mode 100644
index 0000000000..9f8afbe3e4
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_zk_migration_2.png differ
diff --git a/docs/doxygen-user/images/solr/solr_zk_migration_3.png b/docs/doxygen-user/images/solr/solr_zk_migration_3.png
new file mode 100644
index 0000000000..ec329b6dc2
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_zk_migration_3.png differ
diff --git a/docs/doxygen-user/images/solr/solr_zk_migration_4.png b/docs/doxygen-user/images/solr/solr_zk_migration_4.png
new file mode 100644
index 0000000000..f2e67a5503
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_zk_migration_4.png differ
diff --git a/docs/doxygen-user/images/solr/solr_zk_migration_5.png b/docs/doxygen-user/images/solr/solr_zk_migration_5.png
new file mode 100644
index 0000000000..51dca488ce
Binary files /dev/null and b/docs/doxygen-user/images/solr/solr_zk_migration_5.png differ
diff --git a/docs/doxygen-user/multi-user/installSolr.dox b/docs/doxygen-user/multi-user/installSolr.dox
index 1ec8bdf856..899c3938a9 100644
--- a/docs/doxygen-user/multi-user/installSolr.dox
+++ b/docs/doxygen-user/multi-user/installSolr.dox
@@ -14,15 +14,16 @@ Solr's embedded ZooKeeper is also used as a coordination service for Autopsy.
We have prepared a pre-packaged version of Solr which packages Solr as Windows service.
You will need:
-• A 64-bit version of the Java 8 Runtime Environment (JRE) from https://github.com/ojdkbuild/ojdkbuild. (Download links)
-• Pre-packaged Autopsy version of Solr (LINK TO SOURCEFORGE HERE)
-• A network-accessible machine to install Solr on. Note that the Solr process will need to write data out to the main shared storage drive, and needs adequate permissions to write to this location, which may be across a network.
+
+- A 64-bit version of the Java 8 Runtime Environment (JRE) from https://github.com/ojdkbuild/ojdkbuild. (Download links)
+
- Pre-packaged Autopsy version of Solr (TODO LINK TO SOURCEFORGE HERE)
+
- A network-accessible machine to install Solr on. Note that the Solr process will need to write data out to the main shared storage drive, and needs adequate permissions to write to this location, which may be across a network.
\section install_solr_install Installation
\subsection install_solr_jre JRE Installation
-Solr requires a Java Runtime Environment (JRE), which may already be installed. You can test this by running "where java" from the command line. If you see output similar to the results below, you have a JRE.
+Solr requires a Java Runtime Environment (JRE), which may already be installed. You can test this by running \c "where java" from the command line. If you see output similar to the results below, you have a JRE.
\image html wherejava.PNG
@@ -33,12 +34,13 @@ If you need the JRE, use the link in the \ref install_solr_prereq section above
Follow these steps to configure Solr:
-- Extract the solr-8.6.3.zip archive from the location given in the \ref install_solr_prereq section into a directory of your choice. The rest of this document assumes that the archive is extracted into C:\solr-8.6.3 directory.
-
- Go to C:\solr-8.6.3\bin directory and open the solr.in.cmd file in a text editor.
+
- Extract the solr-8.6.3.zip archive from the location given in the \ref install_solr_prereq section into a directory of your choice. The rest of this document assumes that the archive is extracted into \c "C:\solr-8.6.3" directory.
+
- Go to the \c "C:\solr-8.6.3\bin" directory and open the \c "solr.in.cmd" file in a text editor.
\image html solr_config_folder.png
- Search for each "TODO" and specify a valid path for each of the required configuration parameters. These parameters will be described in detail \ref install_solr_params "below".
\image html solr_config_todo.png
+
\image html solr_config_param.png
@@ -46,38 +48,37 @@ Follow these steps to configure Solr:
Required Solr Configuration Parameters:
-- JAVA_HOME – path to 64-bit JRE installation. For example "JAVA_HOME=C:\Program Files\Java\jre1.8.0_151" or "JAVA_HOME=C:\Program Files\ojdkbuild\java-1.8.0-openjdk-1.8.0.222-1"
-
- DEFAULT_CONFDIR – path to Autopsy configuration directory. If the Solr archive was extracted into C:\solr-8.6.3 directory, then this path will be “C:\ solr-8.6.3\server\solr\configsets\AutopsyConfig\conf”.
-
- Dbootstrap_confdir – same path as DEFAULT_CONFDIR
-
- SOLR_JAVA_MEM - Solr JVM heap size should be somewhere between one third and one half of the total RAM available on the machine. A rule of thumb would be to set the heap size to "set SOLR_JAVA_MEM=-Xms2G -Xmx14G" for a machine with 32GB of RAM or more, and "set SOLR_JAVA_MEM=-Xms2G -Xmx8G" for a machine with 16GB of RAM.
-
- SOLR_DATA_HOME – location where Solr indexes will be stored. If this is not configured, the indexes will be stored in the "C:\solr-8.6.3\server\solr" directory. NOTE: for Autopsy cases consisting of large number of data sources, Solr indexes can get very large (hundreds of GBs, or TBs) so they should probably be stored on a larger network share.
+
- JAVA_HOME – path to 64-bit JRE installation. For example \c "JAVA_HOME=C:\Program Files\Java\jre1.8.0_151" or \c "JAVA_HOME=C:\Program Files\ojdkbuild\java-1.8.0-openjdk-1.8.0.222-1"
+
- DEFAULT_CONFDIR – path to Autopsy configuration directory. If the Solr archive was extracted into \c "C:\solr-8.6.3" directory, then this path will be \c "C:\ solr-8.6.3\server\solr\configsets\AutopsyConfig\conf".
+
- Dbootstrap_confdir – same path as DEFAULT_CONFDIR
+
- SOLR_JAVA_MEM - Solr JVM heap size should be somewhere between one third and one half of the total RAM available on the machine. A rule of thumb would be use \c "set SOLR_JAVA_MEM=-Xms2G -Xmx14G" for a machine with 32GB of RAM or more, and \c "set SOLR_JAVA_MEM=-Xms2G -Xmx8G" for a machine with 16GB of RAM.
+
- SOLR_DATA_HOME – location where Solr indexes will be stored. If this is not configured, the indexes will be stored in the \c "C:\solr-8.6.3\server\solr" directory. NOTE: for Autopsy cases consisting of large number of data sources, Solr indexes can get very large (hundreds of GBs, or TBs) so they should probably be stored on a larger network share.
Optional Solr Configuration Parameters:
-- SOLR_HOST – by default, the Solr node name is “localhost”. If multiple Solr nodes are going to be used as part of Solr Cloud, then specify the current computer’s host name as SOLR_HOST variable.
+
- SOLR_HOST – by default, the Solr node name is "localhost". If multiple Solr nodes are going to be used as part of Solr Cloud, then specify the current computer’s host name in the SOLR_HOST variable.
\subsubsection install_sorl_index_file_loc Solr Text Index File Location
-Important note: previous versions of Autopsy (Autopsy 4.17.0 and earlier) were storing the Solr text indexes in the case output directory. As a result, the Solr indexes would get deleted if a user deleted the case output directory. Solr 8 (i.e. Autpsy 4.18.0 and later) no longer stores the Solr text index files in the case output directory but instead stores them in location defined by the SOLR_DATA_HOME parameter. As a consequence, if a user choses to manually delete case output directories (for example, to free up disk space), the Solr index directories located in SOLR_DATA_HOME need to be manually deleted as well.
+Important note: previous versions of Autopsy (Autopsy 4.17.0 and earlier) stored the Solr text indexes in the case output directory. As a result, the Solr indexes would get deleted if a user deleted the case output directory. Solr 8 (i.e. Autpsy 4.18.0 and later) no longer stores the Solr text index files in the case output directory but instead stores them in location defined by the SOLR_DATA_HOME parameter. As a consequence, if a user choses to manually delete case output directories (for example, to free up disk space), the Solr index directories located in SOLR_DATA_HOME need to be manually deleted as well.
-Text index for an Autopsy case will follow a naming structure according to following rules: [Autopsy case name] [Case creation time stamp] [Text index creation time stamp] [shardX_replica_nY]. For example, the text index for an Autopsy case "Test Case" will be located in the following directory inside SOLR_DATA_HOME:
+Text index for an Autopsy case will follow a naming structure according to following rules: \c "[Autopsy case name] [Case creation time stamp] [Text index creation time stamp] [shardX_replica_nY]". For example, the text index for an Autopsy case "Test Case" will be located in the following directory inside SOLR_DATA_HOME:
\image html solr_config_case.png
-\subsection install_solr_service Windows Service Installation
+\subsection install_solr_service Solr Service Installation
-At this point Solr has been configured and ready to be installed as Windows service. Open a command line console as Administrator and navigate to C:\solr-8.6.3\bin directory. From there, run the following command: "nssm install Solr_8.6.3".
+At this point Solr has been configured and ready to be installed as Windows service. Open a command line console as Administrator and navigate to the \c "C:\solr-8.6.3\bin" directory. From there, run the following command: \c "nssm install Solr_8.6.3".
\image html solr_install_1.png
-An NSSM UI window will appear. Click the “Path” navigation button:
+An NSSM UI window will appear. Click the "Path" navigation button:
\image html solr_install_2.png
-And select the “C:\solr-8.6.3\bin\solr.cmd” file. NOTE: Make sure you don’t select the “solr.in.cmd” file by accident.
-In the “Arguments” parameter, type in “start –f –c”:
+Select the \c "C:\solr-8.6.3\bin\solr.cmd" file. NOTE: Make sure you don’t select the \c "solr.in.cmd" file by accident. In the "Arguments" parameter, type in \c "start –f –c":
\image html solr_install_3.png
@@ -87,56 +88,201 @@ Optionally, configure service’s display name, startup type, and account info:
\subsection install_solr_service_user Configure Service User
-Back in Pick Your User Accounts (TODO FIX), you should have decided what user to run Solr as. To configure Solr to run as that user, you'll use Windows Service Manager.
-Switch to the Log On tab to change the logon credentials to the chosen user who will have access to the shared storage.
-- If you specify a domain account, the account name will be in the form of DOMAINNAME\username as shown in the example below
+In the \ref install_multiuseruser_page section, you should have decided what user to run Solr as. To configure Solr to run as that user, you'll use Windows Service Manager.
+
+Switch to the "Log On" tab to change the logon credentials to the chosen user who will have access to the shared storage.
+- If you specify a domain account, the account name will be in the form of \c "DOMAINNAME\username" as shown in the example below
\image html solr_user_1.png
-Click “Install Service”. You should see the following UI window appear:
+Click \c "Install Service". You should see the following UI window appear:
\image html solr_user_2.png
\section install_solr_start Start Solr Service
-At this point the Solr service has been configured and installed. You can verify this by opening Windows “Services” window:
+At this point the Solr service has been configured and installed. You can verify this by opening Windows "Services" window:
\image html solr_start_1.png
-Start the “Solr_8.6.3” service, and verify that the service status changes to “Running”.
+Start the "Solr_8.6.3" service, and verify that the service status changes to "Running".
\image html solr_start_2.png
-\section install_solr_testing
+\section install_solr_testing Testing
There are two tests that you should perform to confirm that the Solr machine is configured correctly.
-- Web Interface: You should attempt to access the Solr admin panel in a web browser. On the Solr machine, navigate to http://localhost:8983/solr/#/ and verify that Solr admin console gets displayed. You should also attempt to access the Solr admin panel in a web browser from another machine on the network. Replace the IP address in the following URL with the IP address or the host name that the Solr service is running on
+
- Web Interface: You should attempt to access the Solr admin panel in a web browser. On the Solr machine, navigate to http://localhost:8983/solr/#/ and verify that the Solr admin console gets displayed. You should also attempt to access the Solr admin panel in a web browser from another machine on the network. Replace "localhost" in the previous URL with the IP address or the host name that the Solr service is running on.
\image html solr_testing_1.png
If the service is appropriately started but you are unable to see the screenshot above, then it could be that port 8983 for Solr and port 9983 for ZooKeeper are blocked by your firewall. Contact your network administrator to open these ports.
-
- Shared Storage: Log into the Solr computer as the user you decided to run the Solr service as and attempt to access the shared storage paths. Ensure that you can access the UNC paths (or drive letters if you have hardware NAS). If everything is configured correctly you should be able to access the storage paths without having to provide credentials. If you are prompted for a password to access the shared storage, then either enter the password and choose to save the credentials or reconfigure the setup so that the same passwords are used, etc. See Storing Credentials (TODO) for steps on storing credentials. If you needed to store the credentials, then you should restart the service or reboot the computer (we have observed that a running service does not get the updated credentials).
+
- Shared Storage: Log in to the Solr computer as the user you decided to run the Solr service as and attempt to access the shared storage paths. Ensure that you can access the UNC paths (or drive letters if you have hardware NAS). If everything is configured correctly you should be able to access the storage paths without having to provide credentials. If you are prompted for a password to access the shared storage, then either enter the password and choose to save the credentials or reconfigure the setup so that the same passwords are used. See the \ref multiuser_users_store section for steps on storing credentials. If you needed to store the credentials, then you should restart the service or reboot the computer (we have observed that a running service does not get the updated credentials).
-\section install_solr_autopsy
+\section install_solr_autopsy Configuring Autopsy
Once the infrastructure is in place, you can configure Autopsy clients to use them.
- Install Autopsy on each client system. Use the normal installer and pick the defaults.
-
- Test that the user has access to the shared storage by opening the shared storage folders using Windows Explorer. If a password prompt is given, then enter the password and store the credentials (see Storing Credentials).
+
- Test that the user has access to the shared storage by opening the shared storage folders using Windows Explorer. If a password prompt is given, then enter the password and store the credentials (see \ref multiuser_users_store).
- Start Autopsy and open the multi-user settings panel from "Tools", "Options", "Multi-user". As shown in the screenshot below, you can then enter all of the address and authentication information for the network-based services. Note that in order to create or open Multi-user cases, "Enable Multi-user cases" must be checked and the settings below must be correct.
-
- To use a Solr 8 server, configure the Solr 8 Service and the ZooKeeper service connection info. ZooKeeper connection info is required. The ZooKeeper port number is 1000 higher than Solr service port number. By default, Solr service port is 8983 so the embedded ZooKeeper port is 9983.
+
- To use a Solr 8 server, configure the Solr 8 Service and the ZooKeeper service connection info. ZooKeeper connection info is required. The ZooKeeper port number is 1000 higher than Solr service port number. By default, Solr service port is 8983 making the embedded ZooKeeper port 9983.
\image html solr_autopsy.png
- For each setting, press the "Test Connection" button to ensure that Autopsy can communicate with each service. If any fail, then refer to the specific setup page for testing options. Also check that a firewall is not blocking the communications.
- NOTE: None of these tests are for permissions on the shared storage because Autopsy does not know about the shared storage. It can't test that until you make a case.
- - Make a test case (see Creating Multi-user cases (TODO)). You can add a single file in as a logical data source. The key concept is to look for errors.
+
- Make a test case (see \ref creating_multi_user_cases). You can add a single file in as a logical data source. The key concept is to look for errors.
- If you find errors, look for errors in the log file on the Autopsy client.
-
- If you followed all of the previous steps in all of the previous pages, then a common error at this point is that Solr cannot access the shared storage and it is running as a Service account. When this happens, you'll see an error message about Solr not being able to create or access a "core". If this happens, review what user Solr should be running as (see Solr Service) and change the shared storage configuration or ensure that credentials are stored.
-
+ - If you followed all of the previous steps in all of the previous pages, then a common error at this point is that Solr cannot access the shared storage and it is running as a Service account. When this happens, you'll see an error message about Solr not being able to create or access a "core". If this happens, review what user Solr should be running as (see the \ref multiuser_users_solr section) and change the shared storage configuration or ensure that credentials are stored.
+\section install_sorl_adding_nodes Adding More Solr Nodes
+
+Solr 8 has ability for multiple Solr nodes to work together as a Solr cluster. In this mode (SolrCloud mode) each Solr collection/index is split across all of the available Solr nodes. This is called sharding. For example, if there are 4 Solr nodes in a SolrCloud cluster, then the text index will be split across the 4 Solr nodes, thus greatly reducing the load on each individual Solr server and improving Solr indexing and searching performance.
+
+To create a Solr cluster, the following steps need to be taken:
+
+- Follow steps in the \ref install_solr_config and \ref install_solr_service sections to create a Solr node (e.g. "Solr1"). Start the Solr service on the Solr1 machine. This machine will host the ZooKeeper service for the SolrCloud cluster.
+
- To add an additional Solr node (e.g. "Solr2") to the SolrCloud cluster, follow the steps in the \ref install_solr_config and \ref install_solr_service sections on the Solr2 machine. Do not start the Solr service on Solr2 yet.
+
- Solr uses ZooKeeper for its internal coordination, so all of the Solr nodes in SolrCloud need to be pointed at the same ZooKeeper service instance. Therefore in order for Solr2 node to be part of SolrCloud, it needs to use the ZooKeeper service that all the other Solr nodes in the SolrCloud cluster are using. In step 1 we have configured Solr1 node to start its embedded ZooKeeper service (this is default Solr behavior). To achieve that, ZK_HOST setting on Solr2 needs to be changed to point at the ZooKeeper service that is running on Solr1 node. The ZooKeeper port number is 1000 higher than SOLR_PORT. By default, SOLR_PORT is 8983 so the embedded ZooKeeper port is 9983. Therefore the ZK_HOST setting in \c "C:\solr-8.6.3\bin\solr.in.cmd" file (assuming that the Solr package ZIP was extracted into \c "C:\solr-8.6.3\" directory) on Solr2 machine needs to be modified to use ZooKeeper service running on Solr1:9983.
+
+\image html solr_adding_nodes_1.png
+
+
- Start Solr service on Solr2 machine.
+
- When you log into a Solr admin console on either Solr1 or Solr2 (via either going to http://localhost:8983/solr/#/ on the machine, or via http://solr1:8983/solr/#/), and then navigate to "Cloud" -> "Nodes" section of the admin tree, you should see all of the Solr nodes that are part of the SolrCloud:
+
+\image html solr_adding_nodes_2.png
+
+
- Additional Solr nodes can be added to the SolrCloud by repeating the previous steps.
+
+
+\section install_solr_solr_4 Legacy (Solr 4) Autopsy Cases and Text Indexes
+
+Things to keep in mind regarding backwards compatibility with existing Solr 4 multi-user cases (cases created with Autopsy versions 4.17.0 and earlier):
+
+
+- New text indexes can only be created using Solr 8 (Autopsy version 4.18.0 and later).
+
- Autopsy is able to open and search existing Solr 4 single-user cases. This functionality comes "out of the box" and nothing needs to be configured or installed to achieve this.
+
- Solr 8 multi-user server is unable to open existing legacy Solr 4 multi-user cases because Solr indexes are only backward compatible one major version back (i.e. Solr 8 is only able to open indexes created using Solr 8 or Solr 7).
+
+
+To overcome this limitation on older multi-user cases, there is an option of configuring Autopsy to be able to connect to both Solr 8 and Solr 4 multi-user servers. If a multi-user Solr 4 server is configured, you will be able to open and search existing Solr 4 cases, as well as add data sources to the existing Solr 4 cases, thus adding more data to the existing legacy Solr 4 text indexes. However, new text indexes can only be created using Solr 8. Note that a Solr 4 server is unable to open text indexes created using a Solr 8 server.
+
+\subsection install_solr_parallel Running Solr 8 and Solr 4 Multi-user Servers in Parallel
+
+It is possible to configure Autopsy to be able to connect to both Solr 8 and Solr 4 multi-user servers. Start Autopsy and open the multi-user settings panel from "Tools", "Options", "Multi-user". Note that in order to create or open Multi-user cases, "Enable Multi-user cases" must be checked and the settings below must be correct.
+
+It is recommended that you run Solr 8 and Solr 4 servers on separate machines. In the example below, Solr 8 server is running on a machine with host name "Solr1" and Solr 4 server is running on a machine with host name "Solr6".
+
+\image html solr_running_in_parallel.png
+
+Once both the Solr 8 and Solr 4 multi-user server connection info is entered and saved, Autopsy will be able to open both Solr 8 multi-user cases (Autopsy version 4.18.0 and later), as well as legacy existing Solr 4 multi-user cases (cases created with Autopsy versions 4.17.0 and earlier).
+
+IMPORTANT: The "Test Connection" button does not verify which version of Solr Autopsy is connecting to. It only verifies that Autopsy is connecting to a Solr server and is able to receive a response. Therefore it is important that the user enters correct server connection info in appropriate fields.
+
+If you intend to run Solr 4 and Solr 8 servers on the same machine at the same time, you need to change the port of the Solr 8 service using the setting SOLR_PORT in \c "C:\solr-8.6.3\bin\solr.in.cmd" file (assuming that the Solr package ZIP was extracted into \c "C:\solr-8.6.3\" directory). By default the Solr service starts on port 8983.
+
+\section install_solr_autopsy_zk Autopsy’s Use of ZooKeeper Service
+
+Autopsy uses ZooKeeper service for multi-user coordination purposes. Autopsy uses ZooKeeper to obtain locks on case level resources before modifying them. Most importantly, Autopsy stores some of its internal state data in ZooKeeper – which cases have been created, their processing state (pending, processing, or completed), as well as other case and job level state data. This is especially important if you are running Autopsy in Auto Ingest Mode, as auto ingest needs to know which jobs have already been processed.
+
+In the screen shot below, for coordination purposes Autopsy will be using the ZooKeeper server that is running on the Solr 8 server ("Solr1" machine).
+
+\image html solr_autopsy_zk.png
+
+\section install_solr_zk_migration Migrating existing ZooKeeper data to Solr 8 server
+
+If you have an existing Solr 4 server that you have been using in Multi-User (MU) mode and you wish to migrate this data onto your new Solr 8 server, we have developed a migration utility that performs this task. Note that the utility is able to migrate ZooKeeper data from any one ZooKeeper server to another ZooKeeper server, and is not tied to migrating Solr 4 ZooKeeper data to a Sol 8 ZooKeeper server.
+
+In our example we will be migrating ZooKeeper data from a ZooKeeper server running on a Solr 4 server (on machine "Solr6") to a brand new ZooKeeper server running on a Solr 8 server (on machine "Solr1").
+
+You can browse the existing ZooKeeper data if you go to Solr6 machine and open the Solr admin console (http://localhost:8983/solr/#/). In the Solr admin console, navigate to "Cloud"-> "Tree", and expand the "autopsy" section of the tree:
+
+\image html solr_zk_migration_1.png
+
+You can follow the same steps to browse the ZooKeeper data on the new Solr 8 server (on "Solr1" machine). If Autopsy has not been used with this server yet, the "autopsy" folder will be missing, as in the example below:
+
+\image html solr_zk_migration_2.png
+
+The ZooKeeper migration utility (ZookeeperNodeMigration.jar) is located in \c "C:\Program Files\(current version of Autopsy)\autopsy\ZookeeperNodeMigration" directory:
+
+\image html solr_zk_migration_3.png
+
+ZookeeperNodeMigration utility requires the following inputs:
+
+- Input Zookeeper IP Address or Hostname
+
- Input Zookeeper Port Number
+
- Output Zookeeper IP Address or Hostname
+
- Output Zookeeper Port Number
+
+
+For example, if you execute the following command from command line, the Zookeeper nodes will get copied from Zookeeper server on Solr6:9983 to Zookeeper server on Solr1:9983 :
+
+> java -jar ZookeeperNodeMigration.jar Solr6 9983 Solr1 9983
+
+\image html solr_zk_migration_4.png
+
+If you do not have Java installed on the machine, you can use the packaged version of Java that is distributed along with Autopsy. For example:
+
+> \c "C:\Program Files\Autopsy-4.18.0\jre\bin\java.exe" -jar ZookeeperNodeMigration.jar Solr6 9983 Solr1 9983
+
+To verify that the ZooKeeper data has been copied from the Solr6 server to the Solr1 server, refresh the Solr admin console on the Solr1 machine. You should now see the "autopsy" directory, along with its contents, when you go to the "Cloud" -> "Tree" section of the Solr admin console:
+
+\image html solr_zk_migration_5.png
+
+\subsection install_solr_standalone_zk Standalone ZooKeeper Server
+
+In our testing, for Autopsy purposes it is not necessary to have a standalone ZooKeeper server. For the regular Autopsy use case it is sufficient to use the "embedded" ZooKeeper service that is started by Solr service (on port 9983). However, Apache Solr documentation recommends that a standalone ZooKeeper service (running on separate a machine) is used in production environments. Below are instructions on how to setup a standalone ZooKeeper server and how to configure Solr & Autopsy to use it.
+
+General Solr-related steps for this process are outlined in the Solr user guide below, in section "SolrCloud Configuration and Parameters":
+
+https://lucene.apache.org/solr/guide/8_6/solrcloud-configuration-and-parameters.html
+
+
+- Download the appropriate Zookeeper installation from http://zookeeper.apache.org/releases.html . Solr 8.6.3 is integrated with Zookeeper 3.5.7. There are several options for download – binaries or source code. The file that you are looking for is \c "apache-zookeeper-3.5.7-bin.tar.gz":
+https://archive.apache.org/dist/zookeeper/zookeeper-3.5.7/
+
- Extract the downloaded tar file containing Zookeeper installation
+
- Create/edit the \c "/conf/zoo.cfg" file to have the following:
+
+- Specify "dataDir" directory – this is where ZK database will be stored.
+
- Specify "clientPort". For example, "clientPort=9983".
+
- "Four letter commands" need to be enabled in ZK config file: https://lucene.apache.org/solr/guide/8_6/setting-up-an-external-zookeeper-ensemble.html#configuration-for-a-zookeeper-ensemble
+
+ - There are Windows and Linux Zookeeeper startup scripts. For Windows, open a command prompt (admin NOT required), go to the directory where the tar file was extracted (e.g. \c "C:\Bitnami\zookeeper-3.5.7"), and type in \c "bin\zkServer.cmd". We have been using Cygwin in our testing and therefore using Linux commands in our examples. For Linux/CygWin, go to the same directory (e.g. \c "C:\Bitnami\zookeeper-3.5.7"), and type in \c "bin/zkServer.sh start".
+
- To verify that Zookeeper is running, in command prompt one can type in \c "bin/zkServer.sh status" (or equivalent Windows command).
+
+\image html solr_standalone_zk_1.png
+
+
- To make Solr use the external ZooKeeper, the following needs to be done. Navigate to the directory where Solr startup scripts are located (usually \c "C:\solr-8.6.3\apache-solr\bin"). Open the \c "solr.in.cmd" file in text editor. If standalone ZooKeeper service is running on the same machine (not recommended), edit the ZK_HOST variable to be \c "set ZK_HOST=localhost:9983". If Zookeeper is running a different machine (e.g. "Solr5"), then enter the Zookeeper machine's host name or IP address instead of "localhost" (e.g. \c "set ZK_HOST=Solr5:9983").
+
+\image html solr_standalone_zk_2.png
+
+
- Re-installation of Solr service is not necessary. Simply stop the Solr service and re-start it.
+
- Once the Solr service has been restarted, you can navigate to Solr admin console (Cloud -> ZK Status) and verify that Solr is using the correct Zookeeper and that the Zookeeper is running.
+
+\image html solr_standalone_zk_3.png
+
+
- Configure Autopsy Multi-User panel to use the standalone ZooKeeper server. Start Autopsy and open the multi-user settings panel from "Tools", "Options", "Multi-user". Note that in order to create or open Multi-user cases, "Enable Multi-user cases" must be checked and the settings below must be correct.
+
+\image html solr_standalone_zk_4.png
+
+
+\section install_solr_backup Backing Up
+
+Solr creates two types of data that need to be backed up:
+
+
+- Text Indexes: These are stored in directory that was specified in SOLR_DATA_HOME parameter (see \ref install_solr_params).
+
- ZooKeeper Data: Autopsy uses a service called ZooKeeper embedded in Solr that stores data about what cases exist and who has them open. This data needs to be backed up so that you can have a list of all available multi-user cases.
+
- In a default installation that data is stored in \c "C:\solr-8.6.3\server\solr zoo_data" (assuming that the Solr package ZIP was extracted into \c "C:\solr-8.6.3" directory).
+
+
+\section install_solr_delayed_start Delayed Start Problems With Large Number Of Solr Collections
+
+In our testing, we have encountered an issue when a very large number (thousands) of Autopsy multi-user cases was created. Each new Autopsy multi-user case creates a Solr "collection" that contains the Solr text index. With 2,000 existing collections, when Solr service is restarted, Solr appears to internally be "loading" roughly 250 collections per minute (in chronological order, starting with oldest collections). After 4 minutes roughly half of the 2,000 collections were loaded. Users are able to search the collections that have been loaded, but they are unable to open or search the collections that have not yet been internally loaded by Solr. After 7-8 minutes all collections were loaded. These numbers will vary depending on the specific cluster configuration, text index file location (network or local storage), network throughput, number of Solr servers, etc.
+
*/