google / timesketch

Collaborative forensic timeline analysis
Apache License 2.0
2.62k stars 589 forks source link

bug Error message: ERROR: Unable to determine path to custom formatter definitions: /etc/timesketch/plaso_formatters.yaml #2931

Closed sebdraven closed 1 year ago

sebdraven commented 1 year ago

Hi !

after a fresh install with docker I've this error when I put a plaso file with the Web UI

image

sebdraven commented 1 year ago

I've found a workarround

sudo docker cp plaso_formatters.yaml timesketch-worker:/etc/timesketch/
jkppr commented 1 year ago

2933 should fix this for good.

sebdraven commented 1 year ago

Thank a lot :) with docker cp is ok too :) I'll close my issue :)