TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform
https://thehive-project.org
GNU Affero General Public License v3.0
3.39k stars 618 forks source link

[Bug] Observable file is not deleted in MinIO #2323

Open fandigunawan opened 2 years ago

fandigunawan commented 2 years ago

Request Type

Bug

Work Environment

Question Answer
OS version (server) RockyLinux 8.5
OS version (client) Windows 11
Virtualized Env. True
Dedicated RAM 12 GB
vCPU 4
TheHive version / git hash 4.1.16
Package Type RPM
Database Cassandra
Index type Elasticsearch
Attachments storage MinIO
Browser type & version If applicable

Problem Description

FIle is not deleted in MinIO after file observable is deleted

Steps to Reproduce

  1. Create file observable
  2. Check if the file is created in MinIO
  3. Delete file observable
  4. The Hive display information and log display nothing wrong
  5. The file is not deleted in MinIO

Complementary information

Successful delete log 2022-01-26 13:06:28,033 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-18 [0000023f|] 10.25.13.178 GET /api/status took 2ms and returned 200 347 bytes 2022-01-26 13:06:28,899 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-22 [00000240|] 10.25.13.178 DELETE /api/case/arti25.13.178 DELETE /api/case/artifact/~122888440 took 457ms and returned 204 0 bytes 2022-01-26 13:06:28,960 [INFO] from org.thp.thehive.services.notification.NotificationActor in application-akka.actor.default-dispatcher-5 [|72e40eb8] Execution of notifier webhook for user None File in MinIO that was not deleted image

Config

storage {
  provider: s3
  s3 {
    bucket = "thp"
    readTimeout = 1 minute
    writeTimeout = 1 minute
    chunkSize = 1 MB
    endpoint = "http://X.X.X.X:9100"
    accessKey = "minio"
    secretKey = "password"
    region = "us-east-1"
  }
}

alpakka.s3.path-style-access = force