Apache Solr 9

sudo systemctl is-active solr.service solr-firstboot.service /opt/solr/bin/solr version

PASS=$(sudo grep '^SOLR_ADMIN_PASSWORD=' /stage/scripts/solr-credentials.log | cut -d= -f2-)
curl -s -o /dev/null -w 'no-auth: HTTP %{http_code}\n' http://127.0.0.1:8983/solr/admin/info/system
curl -sf -u "sac:${PASS}" 'http://127.0.0.1:8983/solr/admin/info/system?wt=json' | head -c 400

The first call returns 401, because BasicAuthPlugin rejects unauthenticated requests. The second returns the cluster system info JSON, including solr-spec-version, JVM and host details.

sudo cat /stage/scripts/solr-credentials.log

Note the values of SOLR_ADMIN_URL, SOLR_ADMIN_USER and SOLR_ADMIN_PASSWORD. The password is a fresh 32-character hex string, so no two VMs share credentials.

Browse to http://<vm-ip>:8983/solr/ and sign in as SecureAnyCloud. The Dashboard shows the Solr instance, JVM memory, file descriptors and index size at a glance.

Choose SecureAnyCloud in the Core Selector. The core overview lists the schema, statistics and the query interface. Click Query to send a *:* query against the empty core. You get numFound: 0 until you index documents.

The Query tab lets you build queries against the SecureAnyCloud core. The left-hand controls cover q=*:*, sorting, faceting, highlighting and JSON Request API examples.

PASS=$(sudo grep '^SOLR_ADMIN_PASSWORD=' /stage/scripts/solr-credentials.log | cut -d= -f2-)
curl -sf -u "sac:${PASS}" -H 'Content-Type: application/json' \
  -d '[{"id":"1","title_t":"hello sac","body_txt":"Solr 9 first document"}]' \
  'http://127.0.0.1:8983/solr/sac/update?commit=true'
curl -sf -u "sac:${PASS}" 'http://127.0.0.1:8983/solr/sac/select?q=*:*&wt=json' | head -c 400

The first call indexes a single document and commits it. The second returns the document under response.docs.

sudo -u solr /opt/solr/bin/solr create -c products -d _default

The solr create CLI clones the bundled _default configset and registers a new products core under /var/solr/data/products. The Admin UI Core Selector picks it up immediately.

Edit /etc/default/solr.in.sh, then restart Solr:

sudo systemctl restart solr.service

Defaults on Standard_B2s:

• SOLR_HEAP: 1024m
• SOLR_JAVA_HOME: /usr/lib/jvm/java-17-openjdk-amd64
• SOLR_HOME: /var/solr/data
• SOLR_PORT: 8983

For production, raise SOLR_HEAP to 4096m or higher on D4s or D8s instances.

Replace <new-password> with the password you choose for the new user:

PASS=$(sudo grep '^SOLR_ADMIN_PASSWORD=' /stage/scripts/solr-credentials.log | cut -d= -f2-)
curl -sf -u "sac:${PASS}" -H 'Content-Type: application/json' \
  -d '{"set-user":{"alice":"<new-password>"}}' \
  'http://127.0.0.1:8983/solr/admin/authentication'
curl -sf -u "sac:${PASS}" -H 'Content-Type: application/json' \
  -d '{"set-user-role":{"alice":["admin"]}}' \
  'http://127.0.0.1:8983/solr/admin/authorization'

Solr's snapshot API takes a point-in-time copy of an index without downtime:

PASS=$(sudo grep '^SOLR_ADMIN_PASSWORD=' /stage/scripts/solr-credentials.log | cut -d= -f2-) sudo -u solr install -d -m 0755 /var/solr/backups curl -sf -u "sac:${PASS}" \
  "http://127.0.0.1:8983/solr/sac/replication?command=backup&location=/var/solr/backups&name=demo"

Copy /var/solr/backups to Azure Blob Storage (az storage blob upload-batch) on a regular schedule for off-VM retention.

sudo journalctl -u solr.service --no-pager -n 80
sudo journalctl -u solr-firstboot.service --no-pager -n 30
sudo tail -50 /var/solr/logs/solr.log 2>/dev/null

Solr writes its main log to /var/solr/logs/solr.log, its request log to /var/solr/logs/<date>.request.log and its slow-query log to /var/solr/logs/solr_slow_requests.log. The systemd journal captures stdout from the first-boot script.