TheHive-Project / TheHive-Project/Cortex
cortex elasticsearch compatibility issue
Nobody has claimed this yet.
- Dominant language
- Scala
- Stars
- 1.6k
- Forks
- 264
- PR merge metrics
- No merged PRs in 30d
Description
Hi Team,
I've installed cortex and elasticsearch in my CentOS_7 and I configured login credential correctely of elastic in cortex config file "/etc/cortex/application.conf" but connection couldn't established.
OS : CentOS Linux release 7.9.2009
elasticsearch-7.14.1-1.x86_64
thehive4-4.1.14-1.noarch
cortex-3.1.3-1.noarch
/etc/cortex/application.conf
search {
index = cortex
uri = "http://127.0.0.1:9200/"
user = "elastic_user"
password = " elastic_pass"
}
/var/log/cortex/application.log
2021-12-04 10:06:20,824 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python hasn't been found
2021-12-04 10:06:21,653 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python2 hasn't been found
2021-12-04 10:06:22,967 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python3 hasn't been found
2021-12-04 10:06:22,995 [ERROR] from org.elastic4play.database.DBConfiguration in application-akka.actor.default-dispatcher-4 - ElasticSearch request failure: POST:/cortex_6/_search?scroll=60000ms
StringEntity({"seq_no_primary_term":"true","query":{"bool":{"must":[{"term":{"relations":{"value":"job"}}},{"term":{"status":{"value":"Waiting"}}}]}},"from":0,"sort":[{"_doc":{"order":"desc"}}]},Some(application/json))
=> ElasticError(index_not_found_exception,no such index [cortex_6],Some(na),Some(cortex_6),None,List(ElasticError(index_not_found_exception,no such index [cortex_6],Some(na),Some(cortex_6),None,null,None,None,None,List())),None,None,None,List())
2021-12-04 10:06:22,995 [WARN] from org.elastic4play.database.SearchWithScroll in application-akka.actor.default-dispatcher-5 - Search error
org.elastic4play.IndexNotFoundException$: null
Is there any compatibility problem related my last installation or any error on my config?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with /etc/cortex/application.conf and the shown /var/log/cortex/application.log entry, then compare the reported Cortex, Elasticsearch, TheHive, and CentOS versions with the project's compatibility information. Done means identifying whether the setup is supported and documenting a reproducible configuration or compatibility result for the missing cortex_6 index.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- centos, elasticsearch, scala
- Domain
- backend, databases
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100