JPCERTCC / SysmonSearch

Investigate suspicious activity by visualizing Sysmon's event log
Other
417 stars 58 forks source link

StixIoc server 404 #2

Open fawz24 opened 6 years ago

fawz24 commented 6 years ago

After following the steps as mentioned in the wiki

https://github.com/JPCERTCC/SysmonSearch/wiki/how-to-install#stixioc-server-setup

I run up to the following response from the StixIoc server (on both Windows 7 x64 and Ubuntu 18.04 x64)

Traceback (most recent call last): File "/home/ubuntu1804/Documents/elk/SysmonSearch/stixioc-import-server/.env/local/lib/python2.7/site-packages/tornado/web.py", line 1569, in _execute result = self.prepare() File "/home/ubuntu1804/Documents/elk/SysmonSearch/stixioc-import-server/.env/local/lib/python2.7/site-packages/tornado/web.py", line 2322, in prepare raise HTTPError(self._status_code) HTTPError: HTTP 404: Not Found

I couldn't figure out what's going on. I currently have ElasticSearch-6.4.2 and Kibana-6.4.2 installed. Any support is welcomed.

PinGMUICT commented 5 years ago

Same issue

mrwhoo commented 4 years ago

Same problem

S03D4-164 commented 4 years ago

Sorry for the late reply.

The stixioc-import-server returns error except for the POST to the following paths:

You can check the server's response by executing the following command in stixioc-import-server directory:

# If running in the localhost:
$ curl localhost:56020/convert/ioc -F 'file=@data/sample.ioc.xml'