[BUG] Cortex is unresponsive if too much jobs

Request Type

Bug

Work Environment

Problem Description

When ending a big quantity of artefact to Cortex to get analyze by a few analyzers, cortex becam unresponsive. Front Page is blank while answering code 200 and it is impossible to get access or communication using API. At the end of all jobs that continue running, service is again available.

Issue is report are not sent back to thehive, you need to rerun analyzer and result is given directly (cached result)

Steps to Reproduce

1. Add some artifact
2. Run them to a big quantity of Analyzer
3. Observate the unresponsivness

Possible Solutions

I did add this to the application.conf this helped in some case but not all.

akka {
  log-config-on-start = on

  actor {
    default-dispatcher {
      fork-join-executor {
        parallelism-max = 16
      }
      thread-pool-executor {
        fixed-pool-size = 16
      }
      throughput = 1
    }
    default-blocking-io-dispatcher {
      fork-join-executor {
        parallelism-max = 32
      }
      thread-pool-executor {
        fixed-pool-size = 32
      }
      throughput = 1
    }
  }
}

Complementary information

(add anything that can help identifying the problem such as log excerpts, screenshots, configuration dumps etc.)

Start by reproducing the failure with a large batch of analyzer jobs and inspect the service logs alongside application.conf. Trace the analyzer-job processing and API/front-page availability while jobs run, including whether reports are returned to TheHive. Done means Cortex remains responsive under the reproduced load and reports are delivered without requiring a rerun.