Can't log into cortex after upgrade #4194
Replies: 1 comment
-
Fixed the status 400 error via the steps taken in this post #2597 (reply in thread) I replaced the api for TheHive with my new account API in /opt/so/saltstack/local/pillar/global.sls |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
After upgrading my centos security onion build via soup, I couldn't log into cortex. I was getting an user init error.
I fixed this via the following.
First I ran
curl -s http://localhost:9400/_all/_settings
this gave me a list of all the hive indexes and cortex instances
I found an cortex instance cortex_6
Secondly, I deleted it via
sudo curl -XDELETE http://localhost:9400/cortex_6
I then navigated my browser back to my cortex page
It prompted me to rebuild database.
I did.
At that point I could create a new user and log back in with superadmin privilege's
A very similiar problem happened to me in Thehive just prior. I fixed it the exact same way.
Edit. I am now getting a status 400 error whenever I try to push elevate alerts to thehive from within the SOC alert page. Does anyone have any suggestions?
Beta Was this translation helpful? Give feedback.
All reactions