Automated installation of TheHive & Cortex by using itamae.
- OS:
Ubuntu 18.04 LTS - TheHive:
3.4.0 - Cortex:
3.0.0 - Elasticsearch:
6.8.3
Please install itamae beforehand.
gem install itamae# Apply an itamae recipe to a Vagrant VM
$ itamae ssh --vagrant cookbooks/thehive/default.rb
# Apply an itamae recipe to a remote host
$ itamae ssh --host x.x.x.x cookbooks/thehive/default.rbAfter running the itamae recipe, TheHive / Cortex / Elasticsearch work on following ports.
- TheHive:
9000/tcp - Cortex:
9001/tcp - Elasticsearch:
9200/tcp
Go to http://YOUR_SERVER_ADDRESS:9001 and follow instructions of the official guide.
You need to set your Cortex API key in /etc/thehive/application.conf.
cortex {
"CORTEX-SERVER-ID" {
url = "http://localhost:9001",
key = "YOUR_API_KEY"
}
}
You have to restart the service before starting setup.
sudo systemctl restart thehiveThen go to http://YOUR_SERVER_ADDRESS:9000 and follow instructions of the official guide.
- Cortex-Analyzers is installed into
/opt/cortex/Cortex-Analyzers.