The popularity of Solr has waned in recent years with Elasticsearch taking much 
of the "market share".
I believe an important factor in this is the lack of options for forwarding 
logs to Solr.

Most of the log forwarding options target Elasticsearch out of the box. Splunk 
has its own dedicated universal forwarder. That makes it very easy to choose 
Elasticsearch or Splunk. Those who try Solr beyond the tutorial stage  
immediately run into problems forwarding log data to Solr.

Logstash is a popular forwarding option that claims to target Solr. When you 
try to use it however there is a bug in the ruby code for RSolr  that requires 
importing an older version and hand editing. It does not work out of the box. 
Most of the other log forwarding options suggest sending their logs to Logstash 
and having that forward them on to Solr.

So, once a new user has finished testing with the tutorial data and is all 
enthusiastic about Solr, the nightmare begins when they try to send their own 
log data for indexing. I suspect most give up at this point and go to 
Elasticsearch and Splunk. They make ingestion easy.

The solution?
The Solr community could make the effort to fix Logstash, or develop a similar 
log forwarder that does work out of the box with Solr.
Difficulty with log forwarding is a dealbreaker for many people.

So, who is up for it?

Regards,
David Moss
Technology Support Officer, Identity & Access Management,
Information Security Services
Enterprise Technology Services | Information and Technologies Branch
Department of Education

[cid:image001.jpg@01D8BDEE.276583A0]P: 0467441553 | M: 0467441553 | E: 
david.m...@qed.qld.gov.au<mailto:david.m...@qed.qld.gov.au>
Level 13| AM60 | 60 Albert Street | Brisbane QLD 4000
PO Box 15033 | City East QLD 4002

[cid:image002.png@01D8BDEE.276583A0][cid:image003.png@01D8BDEE.276583A0][cid:image004.png@01D8BDEE.276583A0]
 [cid:image005.png@01D8BDEE.276583A0] [cid:image006.png@01D8BDEE.276583A0]
 Pronouns He/Him/His<https://www.mypronouns.org/he-him>




***************************************************************************************************

IMPORTANT: This email and any attachments may contain legally privileged, 
confidential or private information, and may be protected by copyright. You may 
only use or disclose this information if you are the intended recipient(s) and 
if you use it in an authorised way. No other person is allowed to use, review, 
alter, transmit, disclose, distribute, print or copy this email and any 
attachments without appropriate authorisation.

If you are not the intended recipient(s) and the email was sent to you by 
mistake, please notify the sender immediately by return email or phone, destroy 
any hardcopies of this email and any attachments and delete it from your 
system. Any legal privilege and confidentiality attached to this email is not 
waived or destroyed by that mistake.

The Department of Education carries out monitoring, scanning and blocking of 
emails and attachments sent from or to addresses within the Department of 
Education for the purposes of operating, protecting, maintaining and ensuring 
appropriate use of its computer network. It is your responsibility to ensure 
that this email does not contain and is not affected by computer viruses, 
defects or interference by third parties or replication problems (including 
incompatibility with your computer system).

The Department of Education does not accept any responsibility for any loss or 
damage that may result from reliance on, or the use of, any information 
contained in the email and any attachments.

***************************************************************************************************

Reply via email to