Autopsy Keyword Search Module

Autopsy uses Lucene SOLR for indexed keyword searching.

Debugging

This section contains some tips for debugging SOLR issues.

• Connect to the admin console using

* http://localhost:23232/solr/admin

• You can see query results with a string like this (replace foo with the search term):

* http://localhost:23232/solr/coreCase/select?q=foo

• You can get a debug query with this:

* http://localhost:23232/solr/coreCase/select?q=foo&wt=xml&debugQuery=true

• You can do a regexp test query with this (replace foo with regexp):

* http://localhost:23232/solr/coreCase/terms?terms.regex=foo&terms=true&terms.limit=20000&terms.regex.flag=case_insensitive&terms.fl=content_ws&timeAllowed=90000&debugQuery=false