[Bug] TheHive 4.1.3-1 Task in Case is not visible

[Canon88]

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	Ubuntu
TheHive version / git hash	4.1.3-1
Package Type	DEB

Problem Description

After I upgraded from TheHive 4.1.2-1 to 4.1.3-1, I found that the Task inside Case was hidden. Just like literally, I couldn't see the Task, even though it was indeed there. I see the following alert out of line in the logs.

2021-04-14 20:43:20,679 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-29 [0000004e|] 192.168.199.4 GET /api/case/~679992/links took 44ms and returned 200 2 bytes
2021-04-14 20:43:20,790 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-27 [00000053|] 192.168.199.4 POST /api/v1/query?name=case-tasks took 24ms and returned 200
2021-04-14 20:43:20,801 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-27 [00000054|] 192.168.199.4 POST /api/v1/query?name=case-tasks.count took 34ms and returned 200 1 bytes
2021-04-14 20:43:20,806 [WARN] from org.thp.scalligraph.utils.Retry in application-akka.actor.default-dispatcher-28 [|] An error occurs (org.janusgraph.core.JanusGraphException: Could not call index), retrying (1)

[To-om]

This occurs because Elasticsearch is not able to sort on full-text (analyzed) field by default.

[Canon88]

This occurs because Elasticsearch is not able to sort on full-text (analyzed) field by default.

So is there any fallback solution? yum installation cannot find the 4.1.2-1 binary package.

[To-om]

A new release of TheHive will come very soon

[Canon88]

A new release of TheHive will come very soon

Okay!

[yokoulaaa]

Hi, we have the same issue but we already have 4.1.4-1 version on our server. We also use Elasticsearch as our indexing engine.

Below is our application.log when we navigate to the tasks :

2021-05-03 16:24:18,986 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-6 [000012f0|] 127.0.0.1 POST /api/v1/query?name=case-tasks took 12ms and returned 200 2021-05-03 16:24:18,997 [WARN] from org.thp.scalligraph.utils.Retry in application-akka.actor.default-dispatcher-6 [|] An error occurs (org.janusgraph.core.JanusGraphException: Could not call index), retrying (1) 2021-05-03 16:24:19,006 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-44 [000012f1|] 127.0.0.1 POST /api/v1/query?name=case-tasks.count took 31ms and returned 200 1 bytes

[nyanhtetnaing1991]

Already upgraded to 4.1.4 with elasticsearch as index engine and S3 for file storage.
Isn't this problem completely fixed?
I have the same issue. And it seems that the same error is occurring again in the Custom tag list display.

[andreacardaropoli]

As @nyanhtetnaing1991 I am not sure the issue is fixed, I have the same issues with 4.1.4 as reported here: #2039 - any chance this can be fixed in 4.1.5?

[nyanhtetnaing1991]

Let me share my experience.
If you prepare connect to Elastsearch correctly in the first upgrade, the task list of the case will be displayed as expected. I haven't been able to do it since I used the local file once.
I think it's probably because I have the wrong data in the Cassandra table, but how do I solve it?

[kesh-stripe]

I'm seeing the same issue in 4.1.20-1:

[�[37minfo�[0m] o.t.s.AccessLogFilter [000006ac|] 10.x.x.x POST /api/v1/query?name=case-tasks took 19ms and returned 200 

[�[37minfo�[0m] o.t.s.AccessLogFilter [00000622|] 10.x.x.x POST /api/v1/query?name=case-tasks.count took 36ms and returned 200 1 bytes

[�[33mwarn�[0m] o.t.s.u.Retry [|] An error occurs (org.janusgraph.core.JanusGraphException: Could not call index), retrying (1)

[xorxorjmp]

The same error is happening on version 4.1.23. Is there a manual fix on the Cassandra side?
@To-om Hi To-om, can we re-open this issue please? Seems that this error came back and is affecting our workflow.

[ghost]

I have the same issue after updating to 4.1.23 and restarting TheHive virtual machines. Tasks are hidden.
TheHive: 4.1.23
ElasticSearch: 7.14.0
Cassandra: 3.11.11