TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine
https://thehive-project.org
GNU Affero General Public License v3.0
1.28k stars 218 forks source link

cortex elasticsearch compatibility issue #392

Open tarikotariko opened 2 years ago

tarikotariko commented 2 years ago

Hi Team,

I've installed cortex and elasticsearch in my CentOS_7 and I configured login credential correctely of elastic in cortex config file "/etc/cortex/application.conf" but connection couldn't established.

OS : CentOS Linux release 7.9.2009 elasticsearch-7.14.1-1.x86_64 thehive4-4.1.14-1.noarch cortex-3.1.3-1.noarch

/etc/cortex/application.conf search { index = cortex uri = "http://127.0.0.1:9200/" user = "elastic_user" password = " elastic_pass" }

/var/log/cortex/application.log 2021-12-04 10:06:20,824 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python hasn't been found 2021-12-04 10:06:21,653 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python2 hasn't been found 2021-12-04 10:06:22,967 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python3 hasn't been found 2021-12-04 10:06:22,995 [ERROR] from org.elastic4play.database.DBConfiguration in application-akka.actor.default-dispatcher-4 - ElasticSearch request failure: POST:/cortex_6/_search?scroll=60000ms StringEntity({"seq_no_primary_term":"true","query":{"bool":{"must":[{"term":{"relations":{"value":"job"}}},{"term":{"status":{"value":"Waiting"}}}]}},"from":0,"sort":[{"_doc":{"order":"desc"}}]},Some(application/json)) => ElasticError(index_not_found_exception,no such index [cortex_6],Some(na),Some(cortex_6),None,List(ElasticError(index_not_found_exception,no such index [cortex_6],Some(na),Some(cortex_6),None,null,None,None,None,List())),None,None,None,List()) 2021-12-04 10:06:22,995 [WARN] from org.elastic4play.database.SearchWithScroll in application-akka.actor.default-dispatcher-5 - Search error org.elastic4play.IndexNotFoundException$: null

Is there any compatibility problem related my last installation or any error on my config?