Open robomotic opened 5 years ago
Did you have a look at /var/log/cortex/application.log
? Any outstanding errors there? Can you provide relevant yet sanitized excerpts so we can help?
Yes I think I have found the issue by launching via the commandline and grabbing the errors:
Oops, cannot start the server. ch.qos.logback.core.joran.spi.JoranException: Could not open URL [file:/etc/cortex/logback.xml]. at ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:57)
In fact in that folder I only see application.conf, I guess I need just to copy that file from the opt folder?
Yes that fixed it, you should edit your documentation from this:
sudo addgroup cortex sudo adduser --system cortex sudo cp /opt/cortex/package/cortex.service /usr/lib/systemd/system sudo chown -R cortex:cortex /opt/cortex sudo chgrp cortex /etc/cortex/application.conf sudo chmod 640 /etc/cortex/application.conf sudo systemctl enable cortex sudo service cortex start
and add:
sudo cp /opt/cortex/conf/logback.xml /etc/cortex/logback.xml sudo chgrp cortex /etc/cortex/logback.xml sudo chmod 640 /etc/cortex/logback.xml
I also noticed that the service is not producing any logs in the file you mentioned: /var/log/cortex/application.log.
Do I need to setup that one in the application configuration? I have tried to see if there are any logs in the service default via:
sudo journalctl -u cortex
however it just logs service starts and stop.
Yes I had to add these 2 lines in the service configuration file:
StandardOutput=file:/etc/cortex/cortex.log StandardError=file:/etc/cortex/cortex.err
and I can see my logs.
Hello there, I have installed thehive with elasticsearch backend via binary, then installed the cortex binaries as well and followed the instructions. When I start the cortex service I get this error:
My application.conf is pretty basic:
ElasticSearch is up and running and of course TheHive is working perfectly, I am not sure what that error message means, any help is appreciated.
Cheers.