[Bug]Tasks not being displayed with Elasticsearch as Index

[andreacardaropoli]

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	Ubuntu
TheHive version / git hash	4.1.4
Package Type	DEB
Database	Cassandra
Index type	Elasticsearch
Attachments storage	S3

Problem Description

Using Elasticsearch as index type, the list of tasks in a case does not appear.

Steps to Reproduce

1. Use elasticsearch as index
2. Add one or more tasks to a case

Complementary information

By looking at the logs this is what I see:

[�[33mwarn�[0m] o.t.s.u.Retry - An error occurs (org.janusgraph.core.JanusGraphException: Could not call index), retrying (1)

We use Elasticsearch 7.9 provided on AWS.

[nadouani]

Hello @andreacardaropoli, what do you mean by We use Elasticsearch 7.9 provided on AWS. Is it a managed service by AWS or did you install your own ES on a AWS resource?

[andreacardaropoli]

Hello @andreacardaropoli, what do you mean by We use Elasticsearch 7.9 provided on AWS. Is it a managed service by AWS or did you install your own ES on a AWS resource?

Hi! Elasticsearch as the managed service by AWS. Also I am testing with 7.10 and it appears like the issue is not there. I will do a bit more testing before saying it's working, thank you!

[andreacardaropoli]

Hello @andreacardaropoli, what do you mean by We use Elasticsearch 7.9 provided on AWS. Is it a managed service by AWS or did you install your own ES on a AWS resource?

Hello! So after some efforts I managed to have it working with Elasticsearch 7.10. This is what I had to do:

• Delete the index from Elasticsearch (thehive_gloabl)
• Inizialise a local database (Cassandra)
• Initialise TheHive4 with local Cassandra and Elasticsearch
• Once running just close and use Elasticsearch in the dev/production environment
  I am not sure why this happened but it was the only way for me to make it work. Otherwise I would get: Could not call index every time I tried to list Tasks from a case.

Few more datapoints. We performed a migration from TheHive 3.4.x to TheHive 4.0.4, then upgraded to 4.1.4 adding Elasticsearch.

[nadouani]

Good to know it worked.