Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Old non-existent analysers showing in Cortex [Bug] #553

Closed
daskydasky opened this issue Oct 24, 2019 · 2 comments
Closed

Old non-existent analysers showing in Cortex [Bug] #553

daskydasky opened this issue Oct 24, 2019 · 2 comments
Labels
category:bug Issue is related to a bug

Comments

@daskydasky
Copy link

daskydasky commented Oct 24, 2019

Describe the bug
After upgrading TheHive / Cortex / Cortex Anlysers I cannot see any analyser available in Hive.
In the hive error log im seeing errors like this below complaining about version numbers.

'version' is undefined on object: {"_routing":"*","analyzerDefinitionId":"HIBP_Query_1_0","_type":"worker","description":"Query haveibeenpwned.com for a compromised email address","dataTypeList":["mail"],"type":"analyzer","jobCache":null,"createdAt":1545656883141,"_parent":"*","createdBy":"cortex*","name":"HIBP_Query_1_0","workerDefinitionId":"HIBP_Query_1_0","_id":"dbe88ef707c365157997123c974c5023","id":"dbe88ef707c365157997123c974c5023","_version":1}

I have realised that I don't even have such analyser, definitely no HIBP version 1. That was the previous before the upgrade.
I have checked HIBP_Query.json and that is showing version 2.0, no sign of one.

The only place where I can see version 1 is in Cortex-Analyzers/analyzers/catalog.json
I have a feeling the catalogue has not been updated to reflect the new analyser versions.

This issue is affecting multiple analysers.

Expected behavior
Non-existent analysers should not be showing in Cortex

Work environment

  • Server OS: Debian
  • Browser type and version: Chrome
  • Cortex version: 3.0.0-1
@daskydasky daskydasky added the category:bug Issue is related to a bug label Oct 24, 2019
@daskydasky
Copy link
Author

I have updated the catalogues, but the issue still standing.
In cortex hxxp://cortex:9001/index.html#!/analyzers still can see the old analysers but within hxxp://cortex:9001/index.html#!/admin/organizations/orgname can only see the correct ones.

Any idea how to resolve this problem?

@daskydasky
Copy link
Author

This is more like Cortex issue so will be closing this here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:bug Issue is related to a bug
Projects
None yet
Development

No branches or pull requests

1 participant