TheHive-Project / TheHive-Project/Cortex

cortex elasticsearch compatibility issue

Open
#392 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Scala
Stars
1.6k
Forks
264
PR merge metrics
No merged PRs in 30d

Description

Hi Team,

I've installed cortex and elasticsearch in my CentOS_7 and I configured login credential correctely of elastic in cortex config file "/etc/cortex/application.conf" but connection couldn't established.

OS : CentOS Linux release 7.9.2009
elasticsearch-7.14.1-1.x86_64
thehive4-4.1.14-1.noarch
cortex-3.1.3-1.noarch

/etc/cortex/application.conf
search {
index = cortex
uri = "http://127.0.0.1:9200/"
user = "elastic_user"
password = " elastic_pass"
}

/var/log/cortex/application.log
2021-12-04 10:06:20,824 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python hasn't been found
2021-12-04 10:06:21,653 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python2 hasn't been found
2021-12-04 10:06:22,967 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python3 hasn't been found
2021-12-04 10:06:22,995 [ERROR] from org.elastic4play.database.DBConfiguration in application-akka.actor.default-dispatcher-4 - ElasticSearch request failure: POST:/cortex_6/_search?scroll=60000ms
StringEntity({"seq_no_primary_term":"true","query":{"bool":{"must":[{"term":{"relations":{"value":"job"}}},{"term":{"status":{"value":"Waiting"}}}]}},"from":0,"sort":[{"_doc":{"order":"desc"}}]},Some(application/json))
=> ElasticError(index_not_found_exception,no such index [cortex_6],Some(na),Some(cortex_6),None,List(ElasticError(index_not_found_exception,no such index [cortex_6],Some(na),Some(cortex_6),None,null,None,None,None,List())),None,None,None,List())
2021-12-04 10:06:22,995 [WARN] from org.elastic4play.database.SearchWithScroll in application-akka.actor.default-dispatcher-5 - Search error
org.elastic4play.IndexNotFoundException$: null

Is there any compatibility problem related my last installation or any error on my config?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with /etc/cortex/application.conf and the shown /var/log/cortex/application.log entry, then compare the reported Cortex, Elasticsearch, TheHive, and CentOS versions with the project's compatibility information. Done means identifying whether the setup is supported and documenting a reproducible configuration or compatibility result for the missing cortex_6 index.

Written by the indexing model from the issue text.

Assessment

Tech stack
centos, elasticsearch, scala
Domain
backend, databases
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.