Home Discussions Questions & Answers Enabling External Access to ECC Core Solr Application

Enabling External Access to ECC Core Solr Application

Avatar photoCustomer March 13, 2021 at 12:49 am

Our security team needs to monitor the ECC Solr application status from a separate monitoring server (IP 192.0.1.1). However, when they try to access the core Solr URL directly, access is denied. How can I grant this specific external IP access?

Viewing 6 reply threads
  • Author
    Replies
    • Support March 13, 2021 at 5:49 am  

      To allow external hosts to access the core Solr application, you must configure the Weblogic Connection Filter rules . You need to log into the ECC Weblogic admin console . Navigate to Domain Structure -> `ecc_domain`, then choose Security -> Filter . Here, you must add an explicit allow rule for the monitoring server’s IP address .

    • Avatar photoCustomer March 15, 2021 at 3:24 am  

      What is the specific syntax for adding an allow rule for IP 192.0.1.1, covering HTTP and HTTPS traffic on the managed server port?

    • Support March 15, 2021 at 8:47 pm  

      The allow rule format specifies the host, target, port, and protocols . For IP 192.0.1.1 on the managed server port (default 7776), the rule should be entered as: `192.0.1.1 * 7776 allow t3 t3s http https` . After adding the rule, ensure you click ‘Save’ and ‘Activate Changes’ in the Weblogic console .

    • Avatar photoCustomer March 16, 2021 at 11:44 pm  

      Once the rule is applied, how can the team verify access to the core Solr application?

    • Support March 17, 2021 at 9:32 am  

      They can verify successful login to the core Solr application by navigating to the URL: `[ECC_HOST_PROTOCOL]://[ECC_HOST_NAME]:[ECC_PORT]/core_ecc` . For a non-SSL setup, this would look like `http://ecc.enginatics.com:7776/core_ecc` . Successful access indicates the connection filter is correctly permitting the traffic from the monitoring server’s IP .

    • Avatar photoCustomer March 18, 2021 at 1:27 am  

      If I am experiencing a connectivity error related to the connection filter (e.g., `weblogic.security.net.FilterException`), what temporary workaround is sometimes effective?

    • Support March 18, 2021 at 11:32 pm  

      In troubleshooting scenarios where the connection filter causes a failure (e.g., blocking the EBS host), a temporary workaround that has proven effective is removing the specific denial rule in the Weblogic Admin console . An example of such a problematic denial rule is: `* * 7776 deny` . Removing this rule allows traffic, but exercise caution as this reduces security; it should only be a temporary measure .

Viewing 6 reply threads
  • You must be logged in to reply to this post.

Login with: