Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UrlScan Enrichment Connector constant restart #2194

Closed
demonoidvk opened this issue Jun 4, 2024 · 1 comment · Fixed by #2198
Closed

UrlScan Enrichment Connector constant restart #2194

demonoidvk opened this issue Jun 4, 2024 · 1 comment · Fixed by #2198
Assignees
Labels
bug use for describing something not working as expected solved use to identify issue that has been solved (must be linked to the solving PR)

Comments

@demonoidvk
Copy link
Contributor

demonoidvk commented Jun 4, 2024

Prerequisites

  • [x ] I read the Deployment and Setup section of the OpenCTI documentation as well as the Troubleshooting page and didn't find anything relevant to my problem.
  • [ x] I went through old GitHub issues and couldn't find anything relevant
  • [ x] I googled the issue and didn't find anything relevant

Description

The urlscan-enrichment connector running via docker, with v6.1.6, constantly restarts.

p.s I might be making a mistake here, so please let me know.

Logs of the container:
image

yml for connector:

  connector-urlscan-enrichment:
    image: opencti/connector-urlscan-enrichment:6.1.6
    environment:
      # OpenCTI's generic execution parameters:
      - OPENCTI_URL=http://opencti:8080
      - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
      # Connector's generic execution parameters:
      - CONNECTOR_ID=cf24a497-bc16-4489-b6d7-8a5208d1fadb
      - CONNECTOR_NAME=Urlscan-enrichment
      - CONNECTOR_SCOPE=url,ipv4-addr,ipv6-addr,domain-name,hostname
      - CONNECTOR_AUTO=false
      - CONNECTOR_LOG_LEVEL=info
      # Connector's custom execution parameters:
      - URLSCAN_ENRICHMENT_API_KEY=<api-key>             # added here, but redacted for sharing on discussion board
      - URLSCAN_ENRICHMENT_API_BASE_URL=https://urlscan.io/api/v1/
      - URLSCAN_ENRICHMENT_IMPORT_SCREENSHOT=true
      - URLSCAN_ENRICHMENT_VISIBILITY=private # Available values : public, unlisted, private
      - URLSCAN_ENRICHMENT_SEARCH_FILTERED_BY_DATE=>now-1y # Available : ">now-1h", ">now-1d", ">now-1y", "[2022 TO 2023]", "[2022/01/01 TO 2023/12/01]"
      - URLSCAN_ENRICHMENT_MAX_TLP=TLP:AMBER # Required, Available values: TLP:CLEAR, TLP:WHITE, TLP:GREEN, TLP:AMBER, TLP:AMBER+STRICT, TLP:RED
    restart: always
    depends_on:
      - opencti

Environment

  1. OS (where OpenCTI server runs): Ubuntu 20.04
  2. OpenCTI version: 6.1.6
  3. OpenCTI client:
  4. Other environment details: NA

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Just start the container.. it constantly goes into restart phase

Additional information

@demonoidvk demonoidvk added needs triage use to identify issue needing triage from Filigran Product team question use for asking information about a functionality or behavior labels Jun 4, 2024
@romain-filigran
Copy link
Member

Problem reproduced.
The problem seems to occur exclusively with the docker image. Not when deploying as python code.
@Megafredo : Can you have a look ?

@romain-filigran romain-filigran added bug use for describing something not working as expected and removed question use for asking information about a functionality or behavior needs triage use to identify issue needing triage from Filigran Product team labels Jun 6, 2024
@romain-filigran romain-filigran added this to the Bugs backlog milestone Jun 6, 2024
@Megafredo Megafredo self-assigned this Jun 6, 2024
@Megafredo Megafredo linked a pull request Jun 6, 2024 that will close this issue
4 tasks
@Megafredo Megafredo added the solved use to identify issue that has been solved (must be linked to the solving PR) label Jun 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected solved use to identify issue that has been solved (must be linked to the solving PR)
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants