Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deploy_timesketch.ps1 does not updated correct variables in timesketch.conf file (opensearch) #2985

Closed
coloradosarge opened this issue Nov 17, 2023 · 0 comments · Fixed by #3000
Assignees
Labels
Bug Deployment Issue related to deployment

Comments

@coloradosarge
Copy link
Contributor

Describe the bug
The Windows deploy_timesketch.ps1 file "sed's" the timesketch.conf file to update the opensearch varables for connection. The timesketch.conf file uses OPENSEARCH_HOST and OPENSEARCH_PORT variables while the PS script uses ELASTIC_HOST and ELASTIC_PORT. This results in a broken installation because timesketch-web attempts to connect to 127.0.0.1:9200 for the Opensearch connection. The configuration must be manually updated in the timesketch/etc/timesketch.conf file to OPENSEARCH_HOST="opensearch".

To Reproduce
Steps to reproduce the behavior:
Use the most recent version of timesketch.ps1 to deploy timesketch. This results in a 500 error when creating or browsing to a sketch and errors indicating that timesketch-web cannot connect to opensearch.

Expected behavior
No errors.

Screenshots

Desktop (please complete the following information):

  • OS: Windows 10
  • Chrome
  • 118.0.5993.71 64-bit

Additional context
Updating the script to replace ELASTIC_HOST with OPENSEARCH_HOST and ELASTIC_PORT with OPENSEARCH_PORT should fix the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Deployment Issue related to deployment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants