biggiesmallsAG / nightHawkResponse

Incident Response Forensic Framework
599 stars 139 forks source link

http:errer #38

Open ehdwnssdj opened 6 years ago

ehdwnssdj commented 6 years ago

http error

If I upload the '.mans' file, it will be uploaded normally, but I get the following error. What is the problem?

What is the path to the log?

-ver info- ubuntu 16.04LTS 64bit

[sudo systemctl status nighthawk-worker] 06 14 17:37:20 systemd[1]: Started nighthawk worker. 06 14 17:58:19 nhr-worker[14653]: 2018-06-14T08:58:19Z - uploadBulkData - ERROR - Failed to bulk index. elastic: No bulk actions to commit 06 14 17:58:19 nhr-worker[14653]: LogMessage - elastic: Error 400 (Bad Request): object mapping for [Message] tried to parse field [Message] as object, but found a concrete value [type=mapper_parsing_exception] 06 14 17:59:41 nhr-worker[14653]: 2018-06-14T08:59:41Z - uploadBulkData - ERROR - Failed to bulk index. elastic: No bulk actions to commit 06 14 17:59:41 nhr-worker[14653]: LogMessage - elastic: Error 400 (Bad Request): object mapping for [Message] tried to parse field [Message] as object, but found a concrete value [type=mapper_parsing_exception] 06 14 18:04:56 nhr-worker[14653]: 2018-06-14T09:04:56Z - uploadBulkData - ERROR - Failed to bulk index. elastic: No bulk actions to commit 06 14 18:04:56 nhr-worker[14653]: LogMessage - elastic: Error 400 (Bad Request): object mapping for [Message] tried to parse field [Message] as object, but found a concrete value [type=mapper_parsing_exception] 06 14 18:06:45 nhr-worker[14653]: 2018-06-14T09:06:45Z - uploadBulkData - ERROR - Failed to bulk index. elastic: No bulk actions to commit 06 14 18:06:45 nhr-worker[14653]: LogMessage - elastic: Error 400 (Bad Request): object mapping for [Message] tried to parse field [Message] as object, but found a concrete value [type=mapper_parsing_exception]

biggiesmallsAG commented 6 years ago

When you say its uploaded normally can you elaborate on that a little bit? So you can upload from the UI and it appears in the audits view but when you click on the case id that HTTP error appears?