Re: Vote on Lucene/Solr 8.11.1 RC1

2021-12-14 Thread Shawn Heisey
On 12/14/2021 7:37 AM, Jan Høydahl wrote: RC1 is out! Head over to dev@lucene list and vote https://lists.apache.org/thread/nwl1td0mg58dx2gzb475t8l2j96yz7v5 Wow, copy/paste is not possible on that archive system. But I figured out how to make it so you can copy the URLs. Click the gear icon

Re: Log4j < 2.15.0 may still be vulnerable even if -Dlog4j2.formatMsgNoLookups=true is set

2021-12-14 Thread solr
Ok. But FTR - apache/log4j has discredited just setting the system property as a mitigation measure, so I still think the SOLR security-page should be changed to not list this as a valid mitigation: https://logging.apache.org/log4j/2.x/security.html "Older (discredited) mitigation measures Thi

Re: Why collection=collection1,2,3 param isn't described in Ref Guide?

2021-12-14 Thread Gus Heck
If documented, some text alerting the user to the difficulties possible if schemas don't match, and relevancy not working as well due to different term frequencies among collections (except maybe it will be ok with use of a stats cache?) It's kind of a tricky thing to use, mostly applicable in care

Re: Log4j < 2.15.0 may still be vulnerable even if -Dlog4j2.formatMsgNoLookups=true is set

2021-12-14 Thread Mike Drob
The MDC Patterns used by solr are for the collection, shard, replica, core and node names, and a potential trace id. All of those are restricted to alphanumeric, no special characters like $ or { needed for the injection. And trying to access a collection that didn’t exist Returns 404 without loggi

Inventory updates via join query and caches

2021-12-14 Thread Mikhail Khludnev
Hello, Colleagues. I want to discuss one frequent usecase: inventory updates. Let's say we can't reindex docs when inventory numbers updated. We can put inventory in separate index, and apply fq={!join .. fromIndex=inventory}left:(0 TO *]. Once it's cached in main index filter cache it gets a good

Re: Why collection=collection1,2,3 param isn't described in Ref Guide?

2021-12-14 Thread Eric Pugh
I suspect it’s more like this never was documented ;-). > On Dec 14, 2021, at 2:59 PM, Mikhail Khludnev wrote: > > Hello, Colleagues. > > I remember this param from early beginning > https://github.com/apache/solr/blame/main/solr/core/src/java/org/apache/solr/handler/component/CloudReplicaS

Why collection=collection1,2,3 param isn't described in Ref Guide?

2021-12-14 Thread Mikhail Khludnev
Hello, Colleagues. I remember this param from early beginning https://github.com/apache/solr/blame/main/solr/core/src/java/org/apache/solr/handler/component/CloudReplicaSource.java#L76. And every time I wondered why it's out of reference guide. Is it a kind of backdoor? Is it described somewhere a

Vote on Lucene/Solr 8.11.1 RC1

2021-12-14 Thread Jan Høydahl
Hi, RC1 is out! Head over to dev@lucene list and vote https://lists.apache.org/thread/nwl1td0mg58dx2gzb475t8l2j96yz7v5 Jan - To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org For additional commands, e-mail: dev-h...@solr.