Re: [sleuthkit-users] Solr / RegExp Update and Survey

[Derrick K. <dk...@gm...>]

I'd be happy with either the first or second approach but would opt for no
backwards compatibility, at least for the way we use it. Since each Autopsy
version installs standalone in its own directory we typically keep multiple
installs going and rarely upgrade mid-case. Once a case is started with a
specific version we'll stick with it pending no major issues.

Derrick

On Tue, Dec 6, 2016 at 08:04 Brian Carrier <ca...@sl...> wrote:

> I have an update Solr / Elastic / regular expression work and a question
> about backward compatibility.
>
> Update: We’re sticking with Solr and will be breaking text into 32KB
> chunks to use a different regular expression searching approach that gives
> us better results. It is actually faster than before!
>
> Question: How much backward compatibility are people expecting? We have
> three general options:
> - no backward compatibility: You need to have  Autopsy 4.2 to open
> existing 4.2 cases.  Existing cases are not upgraded. We’d probably need to
> call this release Autopsy 5 to make it clear what can open what. I’m not
> sure there are enough new features to justify such a major version increase.
> - read-only: Autopsy 4.2 cases can be opened in the new Autopsy (let’s
> call it 4.3), but only searched.  You can’t add new data sources to it and
> it would have the old regular expression searching. If you need to add Data
> Sources, open the case up in 4.2.
> - fully: Autopsy converts the old schema to the new schema (a time
> intensive process). You could open Autopsy cases originally created with
> 4.2 in 4.3 and add to them.
>
> I’ll bias this thread by saying my preference is the read-only approach.
> It’s the least amount of work to provide some level of backward
> compatibility.  Historically, we have always upgraded cases to work with
> new versions of Autopsy.  This is just a lot of work to fully upgrade and
> it isn’t clear that there is a lot of value in doing it.
>
> Who would be sad if we did the read-only approach?
>
>
>
> ------------------------------------------------------------------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today.http://sdm.link/xeonphi
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>