search

TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine
https://thehive-project.org
GNU Affero General Public License v3.0
1.28k stars 218 forks source link

No such file or directory #380

Open harris2015 opened 2 years ago

harris2015 commented 2 years ago

Request Type

Bug

Work Environment

Question Answer
OS version (server) RedHat
OS version (client) 10
Cortex version / git hash 3.1.1-1
Package Type Binary
Browser type & version If applicable

Problem Description

Describe the problem/bug as clearly as possible.

when run the analyzers written by myself, it return an error.

Steps to Reproduce

  1. put my analyzers on the position /opt/analyzers
  2. restart service
  3. enable the analyzer, and create a case to run, it will return error in log
  4. have install python3, and run other analyzers ok, for exam, AbuseIPDB
  5. . Pls give some suggestion.

Possible Solutions

(keep this section if you have suggestions on how to solve the problem. Otherwise delete it)

Complementary information

(add anything that can help identifying the problem such as log excerpts, screenshots, configuration dumps etc.)

[info] o.t.c.s.JobSrv - Looking for similar job in the last 10 minutes (worker=7390edfe350776f921219e1696eb409f, dataType=ip, data=Left(58.97.208.199), tlp=2, parameters={}) [info] o.t.c.s.AuditActor - Job QsMuM3sBSgl94jXJ84gZ has be updated (JsDefined("InProgress")) [info] o.t.c.s.ProcessJobRunnerSrv - Execute /opt/analyzers/ThreatBook/threatbook_analyzer.py in /opt/analyzers, timeout is 30 minutes [info] o.t.c.s.ProcessJobRunnerSrv - Job QsMuM3sBSgl94jXJ84gZ: /usr/bin/env: python3 [info] o.t.c.s.ProcessJobRunnerSrv - Job QsMuM3sBSgl94jXJ84gZ: : No such file or directory [info] o.t.c.s.AuditActor - Job QsMuM3sBSgl94jXJ84gZ has be updated (JsDefined("Failure")) [info] o.t.c.s.JobSrv - Job QsMuM3sBSgl94jXJ84gZ has finished with status Failure

harris2015 commented 2 years ago

analyzer can be found here: https://www.freebuf.com/articles/es/273486.html