SK-CERT / Taranis-NG

Taranis NG is an OSINT gathering and analysis tool for CSIRT teams and organisations. It allows team-to-team collaboration, and contains a user portal for simple self asset management. Taranis NG was developed by SK-CERT with a help from wide CSIRT community.
European Union Public License 1.2
99 stars 21 forks source link

Cant Configure the collector #256

Closed merlin-ke closed 2 months ago

merlin-ke commented 7 months ago

I keep getting this error after running docker composer up. Default collector isn't setup

collectors-1  | [2024-04-08 14:44:15 +0300] [7] [DEBUG] [Errno 2] No such file or directory: '/app/storage/id.txt'
collectors-1  | [2024-04-08 14:44:15 +0300] [7] [WARNING] [None] configuration not received, code: 0, response: Cannot read collector config file.
collectors-1  | [2024-04-08 14:44:15 +0300] [7] [INFO] [None] Core API requested a refresh of osint sources for SCHEDULED_TASKS_COLLECTOR...
collectors-1  | [2024-04-08 14:44:15 +0300] [7] [DEBUG] [Errno 2] No such file or directory: '/app/storage/id.txt'
collectors-1  | [2024-04-08 14:44:15 +0300] [7] [WARNING] [None] configuration not received, code: 0, response: Cannot read collector config file.
hsninbil commented 7 months ago

-STEP 4: Adding a presenter node. Go to Configuration -> Presenters nodes. Click Add new. Enter any name and description. For URL, enter http://presenters/ and for key, enter supersecret (or whatever password you chose during the installation). Click Save.

ByteMastermind commented 7 months ago
  • STEP 1: open terminal, and update the configuration: cd Taranis-NG docker build -t taranis-ng-bots . -f ./docker/Dockerfile.bots docker build -t taranis-ng-collectors . -f ./docker/Dockerfile.collectors docker build -t taranis-ng-core . -f ./docker/Dockerfile.core docker build -t taranis-ng-gui . -f ./docker/Dockerfile.gui docker build -t taranis-ng-presenters . -f ./docker/Dockerfile.presenters docker build -t taranis-ng-publishers . -f ./docker/Dockerfile.publishers
  • [ ] Taranis NG instance is up and running.
  • STEP 2: open the web browser by navigating to https://@ip:4443. The default credentials are admin / admin.
  • STEP 3: to Add a collector, then navigate to Configuration -> Collectors nodes. You should see Default Docker Collector in the list. Or you can add a new collector (figure 1 and 2) collector-nod
Screenshot 2024-04-14 151305

-STEP 4: Adding a presenter node. Go to Configuration -> Presenters nodes. Click Add new. Enter any name and description. For URL, enter http://presenters/ and for key, enter supersecret (or whatever password you chose during the installation). Click Save.

  • STEP 5 : Adding a publisher node: Configuration -> Publishers nodes. Click Add new. Enter any name and description. For URL, enter http://publishers/. and for key, enter supersecret (or whatever password you chose during the installation). Click Save STEP 6 : Adding sources to collect. Configuration -> OSINT Sources. Click Add new. Select the collectors node that you just created and then you should be able to see all the collectors it has registered. Pick one (for instance the RSS collector), and you will be able to enter all the necessary details. Finally, click Save. STEP 7: Uploading the CPE, CWE and CVE dictionaries (https://github.com/SK-CERT/Taranis-NG/tree/main)

Followed aforementioned steps, however, no Default Collector is in the list, and no new collector node can be added (entered same values as in your picture and the same key - was not changed).

image

Any ideas?

hsninbil commented 6 months ago

@ByteMastermind @merlin-ke It happened to me. I retry to rebuild (docker-compose), if you are using the docker-compose

ARANIS_NG_TAG=build docker-compose -f docker/docker-compose.yml build --pull TARANIS_NG_TAG=build docker-compose -f docker/docker-compose.yml up

or this if you have use the docker

TARANIS_NG_TAG=build docker compose -f docker/docker-compose.yml build --pull TARANIS_NG_TAG=build docker compose -f docker/docker-compose.yml up

ByteMastermind commented 6 months ago

@ByteMastermind @merlin-ke It happened to me. I retry to rebuild (docker-compose), if you are using the docker-compose

ARANIS_NG_TAG=build docker-compose -f docker/docker-compose.yml build --pull TARANIS_NG_TAG=build docker-compose -f docker/docker-compose.yml up

or this if you have use the docker

TARANIS_NG_TAG=build docker compose -f docker/docker-compose.yml build --pull TARANIS_NG_TAG=build docker compose -f docker/docker-compose.yml up

Seems like the problem still prevails.

merlin-ke commented 2 months ago

I managed to solve this issue. I opted to build the images using @hsninbil approach. After this, I edited the compose file and updated the image names. I added a password to Postgre on the file too (of course this isn't recommended ). Here is the compose file. After which

docker compose up

Brought up everything.

change the URL from localhost to either an IP or something else otherwise you wont login if you don't access be UI from localhost. This is changed from the .env file.

`services: redis: image: "redis:${REDIS_TAG}" restart: unless-stopped environment: TZ: "${TZ}" volumes:

secrets: postgres_password: file: ./secrets/postgres_password.txt jwt_secret_key: file: ./secrets/jwt_secret_key.txt api_key: file: ./secrets/api_key.txt

volumes: redis_conf: database_data: core_data: presenters_templates: collector_storage:`