TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform
https://thehive-project.org
GNU Affero General Public License v3.0
3.28k stars 609 forks source link

[Bug] Search feature doesn't work #2314

Open nicodeff opened 2 years ago

nicodeff commented 2 years ago

Request Type

Bug

Work Environment

Question Answer
OS version (server) CentOS 7
OS version (client) Chrome 96
Virtualized Env. True
Dedicated RAM 8 GB
TheHive version / git hash 4.1.16
Package Type RPM
Database Cassandra
Index type Lucene
Attachments storage Local

Problem Description

We created a new 4.1 instance from scratch for testing thehive features. We have only 4 cases on this instance and the search feature seem bo be doesn't work.

Steps to Reproduce

  1. Create case with the first three paragraphs of "Lorem Ipsum" in descripion
  2. Go to search menu
  3. Try to search a term in the description text. Exemple : "diam et lacinia laoreet"

Complementary information

Case content :

image

Search case :

image

The config file :

 ##  #
 ## Documentation is available at https: //github.com/TheHive-Project/TheHiveDocs/TheHive4
 ##  #

 ## Include Play secret key
 # More information on secret key at https: //www.playframework.com/documentation/2.8.x/ApplicationSecret
include "/etc/thehive/secret.conf"

 ## Database configuration
db.janusgraph {
    storage {
         ## Cassandra configuration
         # More information at https: //docs.janusgraph.org/basics/configuration-reference/#storagecql
        backend: cql
        hostname: ["127.0.0.1"]
         # Cassandra authentication(if configured)
        // username: "thehive"
        // password: "password"
        cql {
            cluster - name: thp
            keyspace: thehive
        }
    }
    index.search {
        backend: lucene
        directory: /data/thehive/index
         # If TheHive is in cluster ElasticSearch must be used:
        // backend: elasticsearch
        // hostname: ["ip1", "ip2"]
        // index-name: thehive
    }

     ## For test only!
     # Comment the two lines below before enable Cassandra database
     # storage.backend: berkeleyje
     # storage.directory: /opt/thp/thehive/database
    // berkeleyje.freeDisk: 200 # disk usage threshold
}

 ## Attachment storage configuration
storage {
     ## Local filesystem
    provider: localfs
    localfs.location: /data/thehive / files
}

Thanks,

Regards,