TheHive-Project / TheHive-Project/Cortex

Cortex 3.1.0 Crash after starting and trying to access Elastic

Open
#337 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Scala
Stars
1.6k
Forks
264
PR merge metrics
No merged PRs in 30d

Description

Request Type

Bug

Work Environment
Question Answer
OS version (server) Deb 10
Cortex version / git hash 3.1.0 latest apt-get Version
Package Type DEB Install
Problem Description

Since Cortex 3.1.0 cant create the Index by itself (as described here: https://github.com/TheHive-Project/Cortex/issues/305) you have to Manually Create it.
This leads to Cortex starting and crashing after trying to access Elasticsearch, Log of Elastic does not show a Access attempt from Cortex as far as i can tell

Steps to Reproduce

1, Install Cortex according to Documentation
2. Install the newest Elasticsearch Version
3. Create Index Manually bc of Bug: https://github.com/TheHive-Project/Cortex/issues/305
4. Start Cortex Service

Possible Solutions

Fix https://github.com/TheHive-Project/Cortex/issues/305

Complementary information

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the referenced issue 305 and the Cortex 3.1.0 startup path after the manual Elasticsearch index is created. Reproduce the service start on Debian 10, inspect Cortex and Elasticsearch logs, and confirm that the crash is resolved without requiring manual index creation.

Written by the indexing model from the issue text.

Assessment

Tech stack
debian, elasticsearch, scala
Domain
backend, databases
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.