TheHive-Project / TheHive-Project/Cortex

Custom dockerized Analyzer Image not found

Open
#307 2 comments 0 reactions 1 assignee View on GitHub

@To-om is already working on this.

Since Nov 23, 2020.

docker
Dominant language
Scala
Stars
1.6k
Forks
264
PR merge metrics
No merged PRs in 30d

Description

Work Environment^
Question Answer
OS version (server) Ubuntu 20.04
Cortex version / git hash 3.0.1-1
Package Type Binary
Problem Description

We used the following description setting up cortex and the docker engine to dockerize analyzers: https://blog.thehive-project.org/2019/11/20/unleash-the-power-of-dockerized-analyzers-in-5-minutes/

The custom analyzers defined in https://dl.bintray.com/thehive-project/cortexneurons/analyzers.json work pretty well. But our custom analyzers cannot be started.
Therefore we entered the path to our local analyzers in the application.conf:
analyzer
urls = [
#"https://dl.bintray.com/thehive-project/cortexneurons/analyzers.json"
"/etc/cortex/analyzers.json", #default analyzers
"/opt/cortex/analyzers/Cortex-Analyzers/analyzers" #custom local analyzers
]

The Docker image is created:
REPOSITORY TAG IMAGE ID CREATED SIZE
local/url_trace 1 d415f6fa29c7 39 minutes ago 911MB

The analyzers meta data:
{
"name": "URL_Trace",
"version": "1",
"author": "asdf",
"license": "asdf",
"url": "https://github.com/asdf",
"description": "asdf.",
"dataTypeList": ["url"],
"command": "URL_Trace/url_trace_analyzer.py",
"baseConfig": "URL_Trace",
"dockerImage": "local/url_trace:1",
"config": {
"service": "search"
}
}

After enabling the analyzer and starting a job, we receive the following error (under job history):
Image not found: local/url_trace:1

Do you have any clue how to fix that?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.