Alien Vault connector fails to retrieve info (2024-06-02T07:31:42.004714900Z Terminated)

tiancu1980 commented 1 month ago

While trying to install AlienVault connector i get a strange behavior. The connector says is active but the jobs always stay in pending: I have only one entry in the connector logs I had it running but at some point stopped retrieving events I tried rebuilding the hole environment it did not help

i reset the api token
i reset the UUID
deleted all db and reinstall fresh environment
i do not see any errors related to the connector in opencti logs ENV
- 4 elastic nodes
- 4 opencti nodes (3 internal for connectors 1 for UI)
- 2 redis nodes (1 master one slave)
- 1 RabbitMQ
- 6 Workers All other connectors seems to be working Oki.

I have no idea how to proceed with further debugging. Can someone help with this issue?

tiancu1980 commented 1 month ago

Setting logs on Debug does not reveal anything strange as far as understand.

tiancu1980 commented 1 month ago

Reinitialized my account on AlienVault pulse subscription

ktneely commented 3 weeks ago

Reinitialized my account on AlienVault pulse subscription

Did that fix the issue? I have a new OpenCTI instance and an old-ish OTX account and am seeing this exact issue. What does it mean to "reinitialize the account"?

tiancu1980 commented 3 weeks ago

Hi i had to recreate the api token. (only new api token did not resolve my issue) And unsubscribe on all of my pulses and resubscribe to all of my pulses again.

Afterword's the connector started to retrieve the information again.

Hope that will solve the issue for you too.

OpenCTI-Platform / connectors

Alien Vault connector fails to retrieve info (2024-06-02T07:31:42.004714900Z Terminated) #2206