Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] Elasticsearch_Analysis_1_0 docker Permission denied #1089

Closed
frack113 opened this issue Apr 5, 2022 · 3 comments
Closed

[Bug] Elasticsearch_Analysis_1_0 docker Permission denied #1089

frack113 opened this issue Apr 5, 2022 · 3 comments
Labels
category:bug Issue is related to a bug
Milestone

Comments

@frack113
Copy link

frack113 commented Apr 5, 2022

Describe the bug
I have install thehive4-cortex3-misp-shuffle template on a ubuntu 20.04
All is green Thehive-Cortex-Misp so I add the analyzer: Elasticsearch_Analysis_1_0
The job fail with /job: 1: Elasticsearch/elk.py: Permission denied

To Reproduce
Steps to reproduce the behavior:
Install from thehive4-cortex3-misp-shuffle template
Enable elasticsearch_analysis
Run analyzer with a IP test

Expected behavior
Run a query to the other VM with a ELK running

Complementary information

In a terminal:

sudo docker run -ti  cortexneurons/elasticsearch_analysis:1 
/bin/sh: 1: Elasticsearch/elk.py: Permission denied

sudo docker run -ti --entrypoint sh cortexneurons/elasticsearch_analysis:1 
ls result
drwxr-xr-x 2 root root 4096 Dec  1 00:02 Elasticsearch
-rw-r--r-- 1 root root 16490 Nov 30 23:20 elk.py

Work environment

  • Client OS: Ubuntu 20.04.4 LTS
  • Server OS: Docker version 20.10.14, build a224086 /docker-compose version 1.29.2, build 5becea4c
  • Browse type and version: Firefox 98.0.2 (64 bits)
  • Cortex version:
    Cortex 3.1.4-1
    Elastic4Play 1.13.3
    Play 2.8.3
    Elastic4s 7.9.1
    ElasticSearch client 7.9.1
  • Cortex Analyzer/Responder name: elasticsearch_analysis
  • Cortex Analyzer/Responder version: 1 /docker

Possible solutions

Additional context

@V1D1AN
Copy link

V1D1AN commented Apr 16, 2022

I have the same problem

@nadouani nadouani added the category:bug Issue is related to a bug label Jun 20, 2022
@jeromeleonard jeromeleonard added this to the 3.1.1 milestone Jun 21, 2022
@jeromeleonard
Copy link
Contributor

see #1106

@scott7rj
Copy link

same problem here, running cortex 3.1.7-1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:bug Issue is related to a bug
Projects
None yet
Development

No branches or pull requests

5 participants