Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sample hive does not connect to cortex and prints no helpful error message #1028

Closed
Trolldemorted opened this issue Jun 28, 2019 · 2 comments
Assignees
Milestone

Comments

@Trolldemorted
Copy link

Request Type

Bug

Work Environment

Question Answer
OS version (server) -
OS version (client) -
TheHive version / git hash -
Package Type Docker
Browser type & version -

Problem Description

If you use the sampe docker-compose.yml, thehive fails to talk to cortex ("about" page says "AUTH_ERROR"), and prints no helpful error messages. The sample files should work, and thehive should emit meaningful error messages if it fails to establish a connection.

Steps to Reproduce

  1. Download docker-compose file from official docs, apply fix for dockerhub sample uses the wrong port Cortex#203
  2. docker-compose up
  3. Wait until elastic, thehive and cortex have started
  4. Open localhost:9000 in your browser, click "Update Database", wait, register
  5. Open localhost:9001 in your browser, click "Update Database", wait
  6. Wait a bit, check thehive's about page and observe its output

Complementary information

docker-compose output

@nadouani nadouani added this to the 3.4.0-RC2 milestone Jul 2, 2019
@nadouani nadouani added the docker label Jul 2, 2019
@To-om
Copy link
Contributor

To-om commented Jul 3, 2019

TheHive can use Cortex if you create an account in Cortex and configure TheHive with it:

  • after database update, go to Cortex administration page, create an organization and a user with, at least "analyze" role. Create an API key for that user.
  • update your docker-compose.yml and add command: --cortex-key **KEY** in thehive section (under "image: thehiveproject/thehive"). Obviously replace KEY by the key from Cortex.
  • restart services and it should work.

@To-om To-om closed this as completed Jul 3, 2019
@To-om To-om added the need:docs label Jul 3, 2019
@Trolldemorted
Copy link
Author

Is there any way we can automate that?

I have to orchestrate hive installations for demonstration and testing purposes, so manually tinkering every instance is not an option.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants