Keyword Search: The index could not be opened or does not exist (2023)

Autopsy Help
1

Hello, I am facing this error when using Autopsy. With it, I cannot use keyword search.
image

I am trying to open .E01 files from this link, when I encountered this error.

Searching for solutions to this, led me to this post on this website. However, no “core.properties” file could be found, I do not have solr installed and I am gradually losing my mind.

Reopening the case file led to this error:

image
image798×154 7.23 KB

Another idea is to turn off antivirus and proxy, to no avail (New Install of Autopsy 4.0.0: Ingest Failure on E01? · Issue #2108 · sleuthkit/autopsy · GitHub)

Help would be appreciated. Thank you.

2

@Weizhong_Lee Can you post the Autopsy log file for the case? You can locate it by opening the case, and then going to Help->Open Log Folder. I suspect there will be some Solr errors in the log, potentially with starting up the Solr service. Solr service gets started every time you start Autopsy, you do not have to install it. You can verify that Solr is running by starting Autopsy and then going to this URL:

http://localhost:23232/solr/

3

@Eugene_Livis

autopsy.log.3

2023-01-10 20:55:19.224 org.sleuthkit.autopsy.centralrepository.datamodel.RdbmsCentralRepo upgradeSchema
INFO: Central Repository is up to date
2023-01-10 20:55:19.286 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Starting local Solr SOLR8 server
2023-01-10 20:55:19.288 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Port [23,232] available, starting Solr
2023-01-10 20:55:19.289 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Starting Solr 8 server
2023-01-10 20:55:19.289 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Setting Solr 8 directory: C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 20:55:19.294 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Running Solr 8 command: [C:\Program Files\Autopsy-4.19.3\autopsy\solr\bin\autopsy-solr.cmd, start, -p, 23232] from C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 20:55:19.301 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Finished running Solr 8 command
2023-01-10 20:56:19.394 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
WARNING: Local Solr server failed to respond to status requests.
2023-01-10 20:56:19.396 org.sleuthkit.autopsy.keywordsearch.Server configureSolrConnection
SEVERE: Local Solr server is not running
2023-01-10 20:56:19.406 org.sleuthkit.autopsy.casemodule.Case openAppServiceCaseResources
SEVERE: Solr Keyword Search Service failed to open case resources for Test 3
java.util.concurrent.ExecutionException: org.sleuthkit.autopsy.appservices.AutopsyService$AutopsyServiceException: Failed to open or create core for C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.create(Case.java:2237)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.appservices.AutopsyService$AutopsyServiceException: Failed to open or create core for C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.create(Case.java:2237)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.keywordsearch.KeywordSearchModuleException: Unable to connect to Solr server Local keyword search service not yet running
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.create(Case.java:2237)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.keywordsearch.KeywordSearchModuleException: Local keyword search service not yet running
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.create(Case.java:2237)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
2023-01-10 20:56:19.495 org.sleuthkit.autopsy.imagegallery.PerCaseProperties getConfigSetting
INFO: File did not exist. Created file [Image Gallery.properties]
2023-01-10 20:56:19.62 org.sleuthkit.autopsy.imagegallery.datamodel.DrawableDB setPragmas
INFO: sqlite-jdbc version 3.25.2 loaded in native mode
2023-01-10 20:56:19.688 org.sleuthkit.autopsy.casemodule.Case openAsCurrentCase
INFO: Opened Test 3 (test_3_20230110_205517) in C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3 as the current case
2023-01-10 20:56:19.897 org.sleuthkit.autopsy.corecomponents.DataContentViewerHex
INFO: Created HexView instance: org.sleuthkit.autopsy.corecomponents.DataContentViewerHex[,0,0,0x0,invalid,layout=javax.swing.GroupLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=java.awt.Dimension[width=100,height=58]]
2023-01-10 20:56:20.392 org.sleuthkit.autopsy.contentviewers.MediaFileViewer
INFO: Created MediaView instance: org.sleuthkit.autopsy.contentviewers.MediaFileViewer[,0,0,0x0,invalid,layout=java.awt.CardLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 20:56:20.922 org.sleuthkit.autopsy.contentviewers.FileViewer
INFO: Created ApplicationContentViewer instance: org.sleuthkit.autopsy.contentviewers.FileViewer[,0,0,0x0,invalid,layout=javax.swing.OverlayLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 20:56:21.253 org.sleuthkit.autopsy.corecomponents.DataContentTopComponent
INFO: Created DataContentTopComponent instance: org.sleuthkit.autopsy.corecomponents.DataContentTopComponent[Data Content,0,0,0x0,invalid,layout=javax.swing.BoxLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=256,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 20:56:21.493 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Central Repository, version = 4.19.3
2023-01-10 20:56:21.527 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Data Source Integrity, version = 4.19.3
2023-01-10 20:56:21.559 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = DJI Drone Analyzer, version = 4.19.3
2023-01-10 20:56:21.591 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Embedded File Extractor, version = 4.19.3
2023-01-10 20:56:21.592 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Encryption Detection, version = 4.19.3
2023-01-10 20:56:21.622 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Extension Mismatch Detector, version = 4.19.3
2023-01-10 20:56:21.647 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = File Type Identification, version = 4.19.3
2023-01-10 20:56:21.671 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Hash Lookup, version = 4.19.3
2023-01-10 20:56:21.672 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Interesting Files Identifier, version = 4.19.3
2023-01-10 20:56:21.701 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Android Analyzer (aLEAPP), version = 4.19.3
2023-01-10 20:56:21.701 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = iOS Analyzer (iLEAPP), version = 4.19.3
2023-01-10 20:56:21.728 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = PhotoRec Carver, version = 7.0
2023-01-10 20:56:21.756 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Picture Analyzer, version = 4.19.3
2023-01-10 20:56:21.787 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Plaso, version = 4.19.3
2023-01-10 20:56:21.81 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Virtual Machine Extractor, version = 4.19.3
2023-01-10 20:56:21.834 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = YARA Analyzer, version = 4.19.3
2023-01-10 20:56:21.835 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Keyword Search, version = 4.19.3
2023-01-10 20:56:21.837 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Email Parser, version = 4.19.3
2023-01-10 20:56:21.838 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Recent Activity, version = 4.19.3
2023-01-10 20:56:21.928 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader getIngestModuleFactories
INFO: Found ingest module factory: name = GPX Parser, version = 1.2
2023-01-10 20:56:21.929 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader getIngestModuleFactories
INFO: Found ingest module factory: name = Android Analyzer, version = 4.19.3
2023-01-10 20:56:22.072 org.sleuthkit.autopsy.keywordsearch.KeywordSearchGlobalSearchSettingsPanel customizeComponents
WARNING: Could not get number of indexed files/chunks
2023-01-10 20:59:44.269 org.sleuthkit.autopsy.ingest.IngestMonitor$MonitorTimerAction logMonitoredRootDirectory
INFO: Monitoring disk space of C:
2023-01-10 20:59:44.269 org.sleuthkit.autopsy.ingest.IngestManager startIngestJob
INFO: Starting ingest job 0
2023-01-10 20:59:44.272 org.sleuthkit.autopsy.ingest.IngestPipelinesConfiguration getInstance
INFO: Creating ingest module loader instance
2023-01-10 20:59:44.515 org.sleuthkit.autopsy.recentactivity.SearchEngineURLQueryAnalyzer loadConfigFile
INFO: Load successful
2023-01-10 20:59:44.951 org.sleuthkit.autopsy.modules.yara.YaraIngestModule startUp
INFO: YARA ingest module: No rule set was selected for this ingest job.
2023-01-10 20:59:44.952 org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule shutDown
INFO: Keyword search ingest module instance 0 shutting down
2023-01-10 20:59:44.993 org.sleuthkit.autopsy.centralrepository.ingestmodule.CentralRepoIngestModule shutDown
INFO: 0 artifacts in db for case: Test 3 ds:LoneWolf.E01
2023-01-10 20:59:44.997 org.sleuthkit.autopsy.ingest.IngestManager startIngestJob
SEVERE: Error starting Keyword Search ingest module for job 0
org.sleuthkit.autopsy.ingest.IngestModule$IngestModuleException: The index could not be opened or does not exist.
org.sleuthkit.autopsy.keywordsearch.KeywordSearchIngestModule.startUp(KeywordSearchIngestModule.java:262)
org.sleuthkit.autopsy.ingest.IngestTaskPipeline$PipelineModule.startUp(IngestTaskPipeline.java:422)
org.sleuthkit.autopsy.ingest.IngestTaskPipeline.startUpIngestModules(IngestTaskPipeline.java:162)
org.sleuthkit.autopsy.ingest.IngestTaskPipeline.startUp(IngestTaskPipeline.java:114)
org.sleuthkit.autopsy.ingest.IngestJobPipeline.startUpIngestModulePipeline(IngestJobPipeline.java:670)
org.sleuthkit.autopsy.ingest.IngestJobPipeline.startUpIngestModulePipelines(IngestJobPipeline.java:647)
org.sleuthkit.autopsy.ingest.IngestJobPipeline.startUp(IngestJobPipeline.java:563)
org.sleuthkit.autopsy.ingest.IngestJob.start(IngestJob.java:207)
org.sleuthkit.autopsy.ingest.IngestManager.startIngestJob(IngestManager.java:492)
org.sleuthkit.autopsy.ingest.IngestJobInputStream.(IngestJobInputStream.java:42)
org.sleuthkit.autopsy.ingest.IngestManager.openIngestStream(IngestManager.java:341)
org.sleuthkit.autopsy.casemodule.ImageDSProcessor.runWithIngestStream(ImageDSProcessor.java:284)
org.sleuthkit.autopsy.casemodule.AddImageWizardAddingProgressPanel.lambda$startDataSourceProcessing$0(AddImageWizardAddingProgressPanel.java:371)
java.lang.Thread.run(Thread.java:748)
2023-01-10 20:59:44.999 org.sleuthkit.autopsy.ingest.IngestManager startIngestJob
SEVERE: Ingest job 0 could not be started
2023-01-10 20:59:45.003 org.sleuthkit.autopsy.casemodule.ImageDSProcessor runWithIngestStream
SEVERE: Error starting ingest modules
org.sleuthkit.datamodel.TskCoreException: Error starting ingest modules
org.sleuthkit.autopsy.ingest.IngestManager.openIngestStream(IngestManager.java:350)
org.sleuthkit.autopsy.casemodule.ImageDSProcessor.runWithIngestStream(ImageDSProcessor.java:284)
org.sleuthkit.autopsy.casemodule.AddImageWizardAddingProgressPanel.lambda$startDataSourceProcessing$0(AddImageWizardAddingProgressPanel.java:371)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.ingest.IngestManager$IngestManagerException: Errors occurred while starting ingest
org.sleuthkit.autopsy.ingest.IngestManager.openIngestStream(IngestManager.java:350)
org.sleuthkit.autopsy.casemodule.ImageDSProcessor.runWithIngestStream(ImageDSProcessor.java:284)
org.sleuthkit.autopsy.casemodule.AddImageWizardAddingProgressPanel.lambda$startDataSourceProcessing$0(AddImageWizardAddingProgressPanel.java:371)
java.lang.Thread.run(Thread.java:748)
2023-01-10 21:01:02.623 org.sleuthkit.autopsy.casemodule.AddImageTask runAddImageProcess
WARNING: Non-critical error occurred adding image C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Desktop\Forensic Image Files\Forensic Image Files\LoneWolf.E01
org.sleuthkit.datamodel.TskDataException: Errors occurred while ingesting image

  1. Cannot determine file system type (Sector offset: 1226752, Partition Type: Microsoft reserved partition)

    org.sleuthkit.datamodel.SleuthkitJNI.runAddImgNat(Native Method)
    org.sleuthkit.datamodel.SleuthkitJNI.access$2200(SleuthkitJNI.java:52)
    org.sleuthkit.datamodel.SleuthkitJNI$CaseDbHandle$AddImageProcess.run(SleuthkitJNI.java:584)
    org.sleuthkit.autopsy.casemodule.AddImageTask.runAddImageProcess(AddImageTask.java:167)
    org.sleuthkit.autopsy.casemodule.AddImageTask.run(AddImageTask.java:117)
    java.lang.Thread.run(Thread.java:748)
    2023-01-10 21:20:16.278 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
    INFO: Stopping Solr 8 server
    2023-01-10 21:20:16.28 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
    INFO: Setting Solr 8 directory: C:\Program Files\Autopsy-4.19.3\autopsy\solr
    2023-01-10 21:20:16.28 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
    INFO: Running Solr 8 command: [C:\Program Files\Autopsy-4.19.3\autopsy\solr\bin\autopsy-solr.cmd, stop, -k, jjk#09s, -p, 23232] from C:\Program Files\Autopsy-4.19.3\autopsy\solr
    2023-01-10 21:20:16.287 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
    INFO: Finished running Solr 8 command
    2023-01-10 21:20:16.287 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
    INFO: Waiting for Solr server to stop
    2023-01-10 21:20:16.879 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
    INFO: Finished stopping Solr server
    2023-01-10 21:20:16.879 org.sleuthkit.autopsy.core.Installer
    INFO: core installer created
    2023-01-10 21:20:16.926 org.sleuthkit.autopsy.casemodule.Case closeCurrentCase
    INFO: Closing current case Test 3 (test_3_20230110_205517) in C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
    2023-01-10 21:20:18.958 org.sleuthkit.autopsy.casemodule.Case closeAppServiceCaseResources
    SEVERE: Solr Keyword Search Service service failed to open case resources
    java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@2b146f42 registered?
    java.util.concurrent.FutureTask.report(FutureTask.java:122)
    java.util.concurrent.FutureTask.get(FutureTask.java:192)
    org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
    org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
    org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
    java.util.concurrent.FutureTask.run(FutureTask.java:266)
    java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    java.lang.Thread.run(Thread.java:748)
    java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@2b146f42 registered?
    java.util.concurrent.FutureTask.report(FutureTask.java:122)
    java.util.concurrent.FutureTask.get(FutureTask.java:192)
    org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
    org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
    org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
    java.util.concurrent.FutureTask.run(FutureTask.java:266)
    java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    java.lang.Thread.run(Thread.java:748)
    2023-01-10 21:20:18.962 org.sleuthkit.autopsy.imagegallery.ImageGalleryController shutDown
    INFO: Shutting down image gallery controller for case Test 3 (test_3_20230110_205517)
    2023-01-10 21:20:18.964 org.sleuthkit.autopsy.imagegallery.datamodel.DrawableDB close
    INFO: Closing the drawable.db
    2023-01-10 21:20:18.965 org.sleuthkit.autopsy.imagegallery.ImageGalleryController shutDown
    INFO: Completed shut down of image gallery controller for case Test 3 (test_3_20230110_205517)

autopsy.log.2

2023-01-10 21:21:04.091 org.sleuthkit.autopsy.centralrepository.datamodel.RdbmsCentralRepo upgradeSchema
INFO: Central Repository is up to date
2023-01-10 21:21:48.232 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
WARNING: Local Solr server failed to respond to status requests.
2023-01-10 21:21:48.234 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Starting local Solr SOLR8 server
2023-01-10 21:21:48.237 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Port [23,232] available, starting Solr
2023-01-10 21:21:48.238 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Starting Solr 8 server
2023-01-10 21:21:48.244 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Setting Solr 8 directory: C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 21:21:48.244 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Running Solr 8 command: [C:\Program Files\Autopsy-4.19.3\autopsy\solr\bin\autopsy-solr.cmd, start, -p, 23232] from C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 21:21:48.249 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Finished running Solr 8 command
2023-01-10 21:22:48.339 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
WARNING: Local Solr server failed to respond to status requests.
2023-01-10 21:22:48.342 org.sleuthkit.autopsy.keywordsearch.Server configureSolrConnection
SEVERE: Local Solr server is not running
2023-01-10 21:22:48.351 org.sleuthkit.autopsy.casemodule.Case openAppServiceCaseResources
SEVERE: Solr Keyword Search Service failed to open case resources for Test 3
java.util.concurrent.ExecutionException: org.sleuthkit.autopsy.appservices.AutopsyService$AutopsyServiceException: Failed to open or create core for C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.appservices.AutopsyService$AutopsyServiceException: Failed to open or create core for C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.keywordsearch.KeywordSearchModuleException: Unable to connect to Solr server Local keyword search service not yet running
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.keywordsearch.KeywordSearchModuleException: Local keyword search service not yet running
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
2023-01-10 21:22:48.528 org.sleuthkit.autopsy.imagegallery.datamodel.DrawableDB setPragmas
INFO: sqlite-jdbc version 3.25.2 loaded in native mode
2023-01-10 21:22:48.732 org.sleuthkit.autopsy.casemodule.Case openAsCurrentCase
INFO: Opened Test 3 (test_3_20230110_205517) in C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3 as the current case
2023-01-10 21:22:48.733 org.sleuthkit.autopsy.progress.LoggingProgressIndicator progress
INFO: Retrieving images for case: autopsy.db…
2023-01-10 21:22:48.734 org.sleuthkit.autopsy.progress.LoggingProgressIndicator progress
INFO: Opening all filesystems for image: LoneWolf.E01…
2023-01-10 21:22:49.006 org.sleuthkit.autopsy.corecomponents.DataContentViewerHex
INFO: Created HexView instance: org.sleuthkit.autopsy.corecomponents.DataContentViewerHex[,0,0,0x0,invalid,layout=javax.swing.GroupLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=java.awt.Dimension[width=100,height=58]]
2023-01-10 21:22:49.459 org.sleuthkit.autopsy.contentviewers.MediaFileViewer
INFO: Created MediaView instance: org.sleuthkit.autopsy.contentviewers.MediaFileViewer[,0,0,0x0,invalid,layout=java.awt.CardLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 21:22:49.89 org.sleuthkit.autopsy.contentviewers.FileViewer
INFO: Created ApplicationContentViewer instance: org.sleuthkit.autopsy.contentviewers.FileViewer[,0,0,0x0,invalid,layout=javax.swing.OverlayLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 21:22:50.188 org.sleuthkit.autopsy.corecomponents.DataContentTopComponent
INFO: Created DataContentTopComponent instance: org.sleuthkit.autopsy.corecomponents.DataContentTopComponent[Data Content,0,0,0x0,invalid,layout=javax.swing.BoxLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=256,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 21:23:11.326 org.sleuthkit.autopsy.keywordsearch.KeywordSearchGlobalSearchSettingsPanel customizeComponents
WARNING: Could not get number of indexed files/chunks
2023-01-10 21:23:19.911 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Stopping Solr 8 server
2023-01-10 21:23:19.912 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Setting Solr 8 directory: C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 21:23:19.912 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Running Solr 8 command: [C:\Program Files\Autopsy-4.19.3\autopsy\solr\bin\autopsy-solr.cmd, stop, -k, jjk#09s, -p, 23232] from C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 21:23:19.915 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Finished running Solr 8 command
2023-01-10 21:23:19.916 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Waiting for Solr server to stop
2023-01-10 21:23:20.556 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Finished stopping Solr server
2023-01-10 21:23:20.556 org.sleuthkit.autopsy.core.Installer
INFO: core installer created
2023-01-10 21:23:20.598 org.sleuthkit.autopsy.casemodule.Case closeCurrentCase
INFO: Closing current case Test 3 (test_3_20230110_205517) in C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
2023-01-10 21:23:22.604 org.sleuthkit.autopsy.casemodule.Case closeAppServiceCaseResources
SEVERE: Solr Keyword Search Service service failed to open case resources
java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@501f3079 registered?
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@501f3079 registered?
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
2023-01-10 21:23:22.608 org.sleuthkit.autopsy.imagegallery.ImageGalleryController shutDown
INFO: Shutting down image gallery controller for case Test 3 (test_3_20230110_205517)
2023-01-10 21:23:22.61 org.sleuthkit.autopsy.imagegallery.datamodel.DrawableDB close
INFO: Closing the drawable.db
2023-01-10 21:23:22.611 org.sleuthkit.autopsy.imagegallery.ImageGalleryController shutDown
INFO: Completed shut down of image gallery controller for case Test 3 (test_3_20230110_205517)

4

@Eugene_Livis

autopsy.log.1

2023-01-10 21:23:55.747 org.sleuthkit.autopsy.centralrepository.datamodel.RdbmsCentralRepo upgradeSchema
INFO: Central Repository is up to date
2023-01-10 21:24:47.622 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
WARNING: Local Solr server failed to respond to status requests.
2023-01-10 21:24:47.623 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Starting local Solr SOLR8 server
2023-01-10 21:24:47.626 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Port [23,232] available, starting Solr
2023-01-10 21:24:47.626 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Starting Solr 8 server
2023-01-10 21:24:47.627 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Setting Solr 8 directory: C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 21:24:47.627 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Running Solr 8 command: [C:\Program Files\Autopsy-4.19.3\autopsy\solr\bin\autopsy-solr.cmd, start, -p, 23232] from C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-10 21:24:47.633 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Finished running Solr 8 command
2023-01-10 21:25:47.733 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
WARNING: Local Solr server failed to respond to status requests.
2023-01-10 21:25:47.733 org.sleuthkit.autopsy.keywordsearch.Server configureSolrConnection
SEVERE: Local Solr server is not running
2023-01-10 21:25:47.738 org.sleuthkit.autopsy.casemodule.Case openAppServiceCaseResources
SEVERE: Solr Keyword Search Service failed to open case resources for Test 3
java.util.concurrent.ExecutionException: org.sleuthkit.autopsy.appservices.AutopsyService$AutopsyServiceException: Failed to open or create core for C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.appservices.AutopsyService$AutopsyServiceException: Failed to open or create core for C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.keywordsearch.KeywordSearchModuleException: Unable to connect to Solr server Local keyword search service not yet running
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
org.sleuthkit.autopsy.keywordsearch.KeywordSearchModuleException: Local keyword search service not yet running
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
2023-01-10 21:25:47.895 org.sleuthkit.autopsy.imagegallery.datamodel.DrawableDB setPragmas
INFO: sqlite-jdbc version 3.25.2 loaded in native mode
2023-01-10 21:25:48.087 org.sleuthkit.autopsy.casemodule.Case openAsCurrentCase
INFO: Opened Test 3 (test_3_20230110_205517) in C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3 as the current case
2023-01-10 21:25:48.087 org.sleuthkit.autopsy.progress.LoggingProgressIndicator progress
INFO: Retrieving images for case: autopsy.db…
2023-01-10 21:25:48.089 org.sleuthkit.autopsy.progress.LoggingProgressIndicator progress
INFO: Opening all filesystems for image: LoneWolf.E01…
2023-01-10 21:25:48.326 org.sleuthkit.autopsy.corecomponents.DataContentViewerHex
INFO: Created HexView instance: org.sleuthkit.autopsy.corecomponents.DataContentViewerHex[,0,0,0x0,invalid,layout=javax.swing.GroupLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=java.awt.Dimension[width=100,height=58]]
2023-01-10 21:25:48.352 org.sleuthkit.autopsy.commandlineingest.CommandLineManager openCase
INFO: Opened case test_3_20230110_205517
2023-01-10 21:25:48.352 org.sleuthkit.autopsy.commandlineingest.CommandLineOpenCaseManager$JobProcessingTask run
INFO: Opening case at C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3\Test 3.aut
2023-01-10 21:25:48.646 org.sleuthkit.autopsy.contentviewers.MediaFileViewer
INFO: Created MediaView instance: org.sleuthkit.autopsy.contentviewers.MediaFileViewer[,0,0,0x0,invalid,layout=java.awt.CardLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 21:25:49.134 org.sleuthkit.autopsy.contentviewers.FileViewer
INFO: Created ApplicationContentViewer instance: org.sleuthkit.autopsy.contentviewers.FileViewer[,0,0,0x0,invalid,layout=javax.swing.OverlayLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2023-01-10 21:25:49.455 org.sleuthkit.autopsy.corecomponents.DataContentTopComponent
INFO: Created DataContentTopComponent instance: org.sleuthkit.autopsy.corecomponents.DataContentTopComponent[Data Content,0,0,0x0,invalid,layout=javax.swing.BoxLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=256,maximumSize=,minimumSize=,preferredSize=]
2023-01-11 16:06:55.842 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Stopping Solr 8 server
2023-01-11 16:06:55.845 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Setting Solr 8 directory: C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-11 16:06:55.846 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Running Solr 8 command: [C:\Program Files\Autopsy-4.19.3\autopsy\solr\bin\autopsy-solr.cmd, stop, -k, jjk#09s, -p, 23232] from C:\Program Files\Autopsy-4.19.3\autopsy\solr
2023-01-11 16:06:55.879 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Finished running Solr 8 command
2023-01-11 16:06:55.879 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Waiting for Solr server to stop
2023-01-11 16:06:56.71 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Finished stopping Solr server
2023-01-11 16:06:56.71 org.sleuthkit.autopsy.core.Installer
INFO: core installer created
2023-01-11 16:06:57.222 org.sleuthkit.autopsy.casemodule.Case closeCurrentCase
INFO: Closing current case Test 3 (test_3_20230110_205517) in C:\Users\Calvin Lee Wei Zhong\OneDrive - Ngee Ann Polytechnic\Documents\Test 3
2023-01-11 16:06:59.244 org.sleuthkit.autopsy.casemodule.Case closeAppServiceCaseResources
SEVERE: Solr Keyword Search Service service failed to open case resources
java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@1b68aadf registered?
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@1b68aadf registered?
java.util.concurrent.FutureTask.report(FutureTask.java:122)
java.util.concurrent.FutureTask.get(FutureTask.java:192)
org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
java.util.concurrent.FutureTask.run(FutureTask.java:266)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
java.lang.Thread.run(Thread.java:748)
2023-01-11 16:06:59.248 org.sleuthkit.autopsy.imagegallery.ImageGalleryController shutDown
INFO: Shutting down image gallery controller for case Test 3 (test_3_20230110_205517)
2023-01-11 16:06:59.253 org.sleuthkit.autopsy.imagegallery.datamodel.DrawableDB close
INFO: Closing the drawable.db
2023-01-11 16:06:59.258 org.sleuthkit.autopsy.imagegallery.ImageGalleryController shutDown
INFO: Completed shut down of image gallery controller for case Test 3 (test_3_20230110_205517)

5

Solr does not run when a case is opened.

6

@Weizhong_Lee If you look at the beginning of the logs, looks like Solr service is not being started successfully when Autopsy starts. It is likely either due to some permissions (the Solr binaries are located in and run from “Program Files” directory, which could be protected by Windows), or firewall settings. You may be able to get some clues from Solr log files, which are located in C:\Users\YOU_USER_NAME\AppData\Roaming\autopsy\var\log\solr

7

I cannot find the folder, so the alternative is to look into solr.log.stderr, where it apparently does not know what ‘findstr’ is.

'findstr' is not recognized as an internal or external command,
operable program or batch file.
8

Well at least this path certainly should exist: C:\Users\YOU_USER_NAME\AppData\Roaming\autopsy\var\log\

Sometimes I have seen the Solr log folder get created somewhere in Program Files/Autopsy, try looking there for Solr logs.

9

The log folder is missing, so the alternative are these two files.

solr.log.stderr

‘findstr’ is not recognized as an internal or external command,
operable program or batch file.

solr.log.stdout (in pastebin because of link issues.)