Canon88
commented
3 years ago This problem has been solved.
Update configuration
username -> user
search {
index = cortex
## Authentication configuration
user = "elastic"
password = "HelloWorld"
## SSL configuration
keyStore {
path = "/etc/cortex/truststore.jks"
type = "JKS" # or PKCS12
password = "HelloWorld"
}
trustStore {
path = "/etc/cortex/truststore.jks"
type = "JKS" # or PKCS12
password = "HelloWorld"
}
}
cache.job = 10 minutes
analyzer {
urls = [
"https://download.thehive-project.org/analyzers.json"
]
fork-join-executor {
parallelism-min = 2
parallelism-factor = 2.0
parallelism-max = 4
}
}
responder {
urls = [
"https://download.thehive-project.org/responders.json"
]
fork-join-executor {
parallelism-min = 2
parallelism-factor = 2.0
parallelism-max = 4
}
}
Work Environment
Problem Description
I already had an Elastic cluster, so I used Docker to deploy Cortex without Elastic, but I had some problems with it. my Elastic cluster had certificate authentication enabled, and I tried to modify the configuration of the Elastic certificate in Cortex, and the following error was reported at startup.
One note, since my Elastic cluster is certified with ca certificates, I see that Cortex must use JKS certificates. So I did the conversion, is this the right action?
Elastic Config
This is the error reported after docker startup
This is the error when the browser logs in
Docker Config
Cortex Config
cache.job = 10 minutes
analyzer { urls = [ "https://download.thehive-project.org/analyzers.json" ] fork-join-executor { parallelism-min = 2 parallelism-factor = 2.0 parallelism-max = 4 } }
responder { urls = [ "https://download.thehive-project.org/responders.json" ] fork-join-executor { parallelism-min = 2 parallelism-factor = 2.0 parallelism-max = 4 } }