Use of keywordsearch in a plugin

Autopsy Development
1

Hi,
i am writting at a plugin for an automated sources recognition of files.

I want to make a full text search for P2P hashes like the AICH from eMule in that plugin but i find no way to do it.
All what i get are some errors.

First the error messages from autopsy.

Error
Error801×266 12 KB

I is started in debug mode of Netbeans 15, with installed openJDK1.8.0_222

The execution of my code ends with a uncatched execption.
InProgram

If i try to execute the keywordsearch plugin i the this one:
keyword

The solr server is run but it does not look correct, because it is no core loaded.

solr
solr1882×536 33.9 KB

I will be grateful for any tips to fix it.

2

Looks like you have a few errors going on. Check this out to see what the logs are saying and post them here Autopsy User Documentation: Troubleshooting (sleuthkit.org). It also looks like you do not have java FX installed as well.

3

Content of the Error log is:

2022-12-20 16:54:27.173 org.sleuthkit.autopsy.keywordsearch.Server startLocalSolr
INFO: Starting local Solr SOLR8 server
2022-12-20 16:54:27.18 org.sleuthkit.autopsy.casemodule.Case openAppServiceCaseResources
SEVERE: Solr Keyword Search Service failed to open case resources for Veri SZG 2
java.util.concurrent.ExecutionException: java.lang.NoClassDefFoundError: org/apache/zookeeper/server/ByteBufferInputStream
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.NoClassDefFoundError: org/apache/zookeeper/server/ByteBufferInputStream
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.ClassNotFoundException: org.apache.zookeeper.server.ByteBufferInputStream starting from ModuleCL@2d5b1efa[org.sleuthkit.autopsy.keywordsearch] with possible defining loaders [ModuleCL@1cdb4907[org.sleuthkit.autopsy.core]] and declared parents [ModuleCL@5da4d0ac[org.openide.explorer], ModuleCL@42e5ff61[org.netbeans.modules.settings], ModuleCL@2854423d[org.sleuthkit.autopsy.corelibs], ModuleCL@642b6a14[org.netbeans.api.progress.nb], org.netbeans.JarClassLoader@4be06195, ModuleCL@5d4a2fa2[org.sleuthkit.autopsy.Tika], ModuleCL@66783c73[org.netbeans.modules.options.api], ModuleCL@39e5c1f6[org.openide.windows], ModuleCL@19ca6245[org.openide.awt], ModuleCL@25a98e42[org.openide.nodes], ...2 more]
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.ClassNotFoundException: org.apache.zookeeper.server.ByteBufferInputStream
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
2022-12-20 16:54:27.197 org.sleuthkit.autopsy.casemodule.Case openAppServiceCaseResources
SEVERE: Image Gallery Update Service failed to open case resources for Veri SZG 2
java.util.concurrent.ExecutionException: java.lang.NoClassDefFoundError: javafx/beans/property/DoubleProperty
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.NoClassDefFoundError: javafx/beans/property/DoubleProperty
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.ClassNotFoundException: javafx.beans.property.DoubleProperty starting from ModuleCL@45721106[org.sleuthkit.autopsy.imagegallery] with possible defining loaders null and declared parents [ModuleCL@5da4d0ac[org.openide.explorer], ModuleCL@42e5ff61[org.netbeans.modules.settings], ModuleCL@2854423d[org.sleuthkit.autopsy.corelibs], ModuleCL@642b6a14[org.netbeans.api.progress.nb], org.netbeans.JarClassLoader@4be06195, ModuleCL@66783c73[org.netbeans.modules.options.api], ModuleCL@39e5c1f6[org.openide.windows], ModuleCL@19ca6245[org.openide.awt], ModuleCL@25a98e42[org.openide.nodes], ModuleCL@38a4a9e2[org.netbeans.api.progress], ...2 more]
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.ClassNotFoundException: javafx.beans.property.DoubleProperty
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.openAppServiceCaseResources(Case.java:2851)
	org.sleuthkit.autopsy.casemodule.Case.open(Case.java:2286)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doOpenCaseAction$6(Case.java:2154)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
2022-12-20 16:54:27.201 org.sleuthkit.autopsy.casemodule.Case openAsCurrentCase
INFO: Opened Veri SZG 2 (veri_szg_2_20221108_192252) in E:\Verify\Veri SZG 2 as the current case
2022-12-20 16:54:27.201 org.sleuthkit.autopsy.progress.LoggingProgressIndicator progress
INFO: Retrieving images for case: autopsy.db...
2022-12-20 16:54:27.209 org.sleuthkit.autopsy.progress.LoggingProgressIndicator progress
INFO: Opening all filesystems for image: eval-szg-2.vhd...
2022-12-20 16:54:27.501 org.sleuthkit.autopsy.casemodule.StartupWindowProvider init
INFO: Will use the default startup window: org.sleuthkit.autopsy.casemodule.StartupWindow[dialog0,0,0,477x321,invalid,hidden,layout=java.awt.BorderLayout,APPLICATION_MODAL,title=Welcome,defaultCloseOperation=HIDE_ON_CLOSE,rootPane=javax.swing.JRootPane[,8,31,461x282,layout=javax.swing.JRootPane$RootLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=16777673,maximumSize=,minimumSize=,preferredSize=],rootPaneCheckingEnabled=true]
2022-12-20 16:54:27.56 org.sleuthkit.autopsy.corecomponents.DataContentViewerHex <init>
INFO: Created HexView instance: org.sleuthkit.autopsy.corecomponents.DataContentViewerHex[,0,0,0x0,invalid,layout=javax.swing.GroupLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=java.awt.Dimension[width=100,height=58]]
2022-12-20 16:54:28.241 org.sleuthkit.autopsy.corecomponents.DataContentTopComponent <init>
INFO: Created DataContentTopComponent instance: org.sleuthkit.autopsy.corecomponents.DataContentTopComponent[Data Content,0,0,0x0,invalid,layout=javax.swing.BoxLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=256,maximumSize=,minimumSize=,preferredSize=]
2022-12-20 16:54:32.184 org.sleuthkit.autopsy.texttranslation.translators.GoogleTranslator loadTranslator
INFO: No credentials file has been provided for Google Translator
2022-12-20 16:54:32.184 org.sleuthkit.autopsy.texttranslation.translators.GoogleTranslator loadTranslator
WARNING: Credentials were not successfully made, no translations will be available from the GoogleTranslator
2022-12-20 16:54:47.859 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Stopping Solr 8 server
2022-12-20 16:54:47.86 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Setting Solr 8 directory: F:\Autopsy-4.19.3\autopsy\solr
2022-12-20 16:54:47.86 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Running Solr 8 command: [F:\Autopsy-4.19.3\autopsy\solr\bin\autopsy-solr.cmd, stop, -k, jjk#09s, -p, 23232] from F:\Autopsy-4.19.3\autopsy\solr
2022-12-20 16:54:47.864 org.sleuthkit.autopsy.keywordsearch.Server runLocalSolr8ControlCommand
INFO: Finished running Solr 8 command
2022-12-20 16:54:47.864 org.sleuthkit.autopsy.keywordsearch.Server stopLocalSolr
INFO: Waiting for Solr server to stop
2022-12-20 16:54:48.59 org.sleuthkit.autopsy.core.Installer <init>
INFO: core installer created
2022-12-20 16:54:48.658 org.sleuthkit.autopsy.casemodule.Case closeCurrentCase
INFO: Closing current case Veri SZG 2 (veri_szg_2_20221108_192252) in E:\Verify\Veri SZG 2
2022-12-20 16:54:50.668 org.sleuthkit.autopsy.casemodule.Case closeAppServiceCaseResources
SEVERE: Solr Keyword Search Service service failed to open case resources
java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@4f4b620b registered?
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
	org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.IllegalArgumentException: missing event subscriber for an annotated method. Is org.sleuthkit.autopsy.keywordsearch.SolrSearchService@4f4b620b registered?
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
	org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
2022-12-20 16:54:50.672 org.sleuthkit.autopsy.casemodule.Case closeAppServiceCaseResources
SEVERE: Image Gallery Update Service service failed to open case resources
java.util.concurrent.ExecutionException: java.lang.NoClassDefFoundError: javafx/beans/property/DoubleProperty
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
	org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.NoClassDefFoundError: javafx/beans/property/DoubleProperty
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
	org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.ClassNotFoundException: javafx.beans.property.DoubleProperty starting from ModuleCL@45721106[org.sleuthkit.autopsy.imagegallery] with possible defining loaders null and declared parents [ModuleCL@5da4d0ac[org.openide.explorer], ModuleCL@42e5ff61[org.netbeans.modules.settings], ModuleCL@2854423d[org.sleuthkit.autopsy.corelibs], ModuleCL@642b6a14[org.netbeans.api.progress.nb], org.netbeans.JarClassLoader@4be06195, ModuleCL@66783c73[org.netbeans.modules.options.api], ModuleCL@39e5c1f6[org.openide.windows], ModuleCL@19ca6245[org.openide.awt], ModuleCL@25a98e42[org.openide.nodes], ModuleCL@38a4a9e2[org.netbeans.api.progress], ...2 more]
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
	org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
java.lang.ClassNotFoundException: javafx.beans.property.DoubleProperty
	java.util.concurrent.FutureTask.report(FutureTask.java:122)
	java.util.concurrent.FutureTask.get(FutureTask.java:192)
	org.sleuthkit.autopsy.casemodule.Case.closeAppServiceCaseResources(Case.java:3090)
	org.sleuthkit.autopsy.casemodule.Case.close(Case.java:3033)
	org.sleuthkit.autopsy.casemodule.Case.lambda$doCloseCaseAction$9(Case.java:2962)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)

And yes something with javafx is broken I don’t know how to fix that either.
But i think this is not the problem for my keywordsearch problem.