search

CIRCL / AIL-framework

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project
https://github.com/ail-project/ail-framework
GNU Affero General Public License v3.0
1.29k stars 283 forks source link

Can't connect AIL to TheHive #507

Closed Zakaren closed 4 years ago

Zakaren commented 4 years ago

Hi,

We have a problem when we try to connect TheHive SIRP to the AIL-Framework, but it doesn't work.

In the "/configs/keys/theHiveKEYS.py" file, we added the right URL, and an API key allowing writing to Thehive. (the certificate value is set to false in our case).

Then, I run "/bin/MISP_The_Hive_feeder.py" and I get a successful connection message in AIL: Connected to The HIVE: https://.

But in Thehive's logs we see that AIL receives a 404 code with this error: o.e.ErrorHandler - GET /api/alert/0 returned 404, and in AIL's GUI the connection still appears as "the hive not connected".

For your information, we had successfully tested this feature before the AIL update.

Have you made any changes to this, which could explain this problem?

Thank you in advance for your help.

Zakaren commented 4 years ago

We resolved the problem by replacing the new lines by the old ones :

https://github.com/CIRCL/AIL-framework/commit/8a1a4a1a03185f96956a6377e61689e2ddf5a29c