TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine
https://thehive-project.org
GNU Affero General Public License v3.0
1.28k stars 217 forks source link

ERROR CONNECTING REFUSED OR CLOSED CORTEX WITH OPENSEARCH #453

Open romarito90 opened 11 months ago

romarito90 commented 11 months ago

ERROR CONNECTING REFUSED OR CLOSED CORTEX WITH OPENSEARCH

Request Type

Error connection refused or closed with opensearch and cortex

Work Environment

Question Answer
OS version (server) RedHat 8.8
Cortex version 3.1.7
Opensearch 1.3.11
Package Type RPM
Browser type & version Firefox

Problem Description

I tried to use opensearch instead elasticsearch with cortex but this cause errors

This is the configuration in opensearch.yml

imagen imagen imagen imagen

this is my configuration with cortex in application.conf

imagen

I got these errors when I tried to reach the cortex page 127.0.0.1:9001

imagen imagen imagen imagen

If I tried to change these values below in opensearch.yml i got this error

I changed the values from false to true imagen

I got the next errors

imagen imagen imagen imagen

Steps to Reproduce

Step 1 install opensearch version 1.3.11 and configure opensearch accordingly and run service Step 2 install cortex 3.1.7 latest version and configure cortex accordingly and run service Step 3 Try to open cortex in browser localhost:9001 and this cause error

Possible solutions

Maybe I think this is a problem with elastic4s and elastic4play libraries of cortex and this cause a problem with compatibility with opensearch, maybe these libraries needs to be change to have a compatibility with opensearch

Complementary information