cortex elasticseach connection error

[tarik achoughi]

Hello,

I've installed cortex and elasticsearch in my CentOS_7 and I configured login credential correctely of elastic in cortex config file "/etc/cortex/application.conf" but connection couldn't established.

OS : CentOS Linux release 7.9.2009

elasticsearch-7.14.1-1.x86_64
thehive4-4.1.14-1.noarch

cortex-3.1.3-1.noarch

/etc/cortex/application.conf

search {
  index = cortex
  uri = "http://127.0.0.1:9200/" 
  user = "elastic_user"
  password = " elastic_pass"
}

/var/log/cortex/application.log

2021-12-04 10:06:20,824 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python hasn't been found
2021-12-04 10:06:21,653 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python2 hasn't been found
2021-12-04 10:06:22,967 [WARN] from org.thp.cortex.services.JobRunnerSrv in main - The package cortexutils for python3 hasn't been found
2021-12-04 10:06:22,995 [ERROR] from org.elastic4play.database.DBConfiguration in application-akka.actor.default-dispatcher-4 - ElasticSearch request failure: POST:/cortex_6/_search?scroll=60000ms
StringEntity({"seq_no_primary_term":"true","query":{"bool":{"must":[{"term":{"relations":{"value":"job"}}},{"term":{"status":{"value":"Waiting"}}}]}},"from":0,"sort":[{"_doc":{"order":"desc"}}]},Some(application/json))
 => ElasticError(index_not_found_exception,no such index [cortex_6],Some(_na_),Some(cortex_6),None,List(ElasticError(index_not_found_exception,no such index [cortex_6],Some(_na_),Some(cortex_6),None,null,None,None,None,List())),None,None,None,List())
2021-12-04 10:06:22,995 [WARN] from org.elastic4play.database.SearchWithScroll in application-akka.actor.default-dispatcher-5 - Search error
org.elastic4play.IndexNotFoundException$: null

Is there any compatibility problem related my last installation or any error on my config?

Thank you in advanced.

[abdelali elkouri]

Hi,

Please I have a same issue do you found a solution ?

BR,

Abdelali

[tarik achoughi]

Hi Abdelali,

Yes, it's a question of compatibility between versions.

I tried many installation and finally it's working fine with the following :
Cortex Version: 3.1.1

The Hive Version : 4.1.14
Elasticsearch Version : 7.11.2

Tarik

--
You received this message because you are subscribed to the Google Groups "Cortex Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cortex-monitor...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cortex-monitoring/c3a8d787-e826-4401-a85c-966b6aa635cfn%40googlegroups.com.

--

Tarik Achoughi
00212 671 25 59 33