docker icon indicating copy to clipboard operation
docker copied to clipboard

OpenCTI docker installation does not work

Open rocheston opened this issue 2 years ago • 7 comments

After following the docker installation instructions from the website and correctly configuring the .env variables, I was able to log in to the dashboard; however, I was unable to get any of the connectors to connect to OpenCTI. I tried both the python script and docker-compose connector instances, making sure all the UUID variables were set correctly. Despite trying numerous combinations, nothing worked.

grab6

The connectors are failing: OpenCTI API is not reachable. Why is your docker-compose file pointing the connector to http://opencti:8080? I changed to http://localhost:8080 does not work. I changed to http://172.17.0.1:8080 does not work or the host ip does not work. I tried every connector Mitre, AlienVault, all of the them have the same issue. OpenCTI API is not reachable.

grab5

grab7

Configuring OpenCTI on dockers has been a nightmare. Your instructions do not work, and it is unfortunate that I am unable to use the beautiful GUI that OpenCTI has to offer.

Please update your docker instructions and relevant yml configurations so that it simply works out of the box. Can somebody fix this, please?

rocheston avatar Apr 01 '23 10:04 rocheston

Could you share code of your Docker compose yml file so I can identify the issue.

cxfajar avatar Apr 01 '23 11:04 cxfajar

When using the docker-compose file from the OpenCTI-Platform/docker repository, any connectors added will generate an error stating 'OpenCTI API is not reachable'. This issue can be replicated by running the below docker-compose file. Please try it.

https://github.com/OpenCTI-Platform/docker/blob/master/docker-compose.yml

rocheston avatar Apr 01 '23 14:04 rocheston

All the connectors that are given in this file are connectors for internal export files; you have to add connectors from external imports like MISP ALIENVAULT so the total number of entities and relationships will show up. Here is a link where you can manually add any connector from an external import: https://github.com/OpenCTI-Platform/connectors/tree/master/external-import, and I have a file that has already added some connectors. Here is the link for that file: https://github.com/2004gixxer600/openctihowto/blob/main/docker-compose.yml

Furthermore, if you are confused about API, you have to sign up on a website like AlienVault, and from there you can copy your own API key and paste it.

On Sat, 1 Apr 2023 at 7:15 PM, Rocheston @.***> wrote:

When using the docker-compose file from the OpenCTI-Platform/docker repository, any connectors added will generate an error stating 'OpenCTI API is not reachable'. This issue can be replicated by running the below docker-compose file. Please try it.

https://github.com/OpenCTI-Platform/docker/blob/master/docker-compose.yml

— Reply to this email directly, view it on GitHub https://github.com/OpenCTI-Platform/docker/issues/81#issuecomment-1492983313, or unsubscribe https://github.com/notifications/unsubscribe-auth/A63BIQYZN7EIQW7LS4ITWU3W7A2BVANCNFSM6AAAAAAWPRYB3Q . You are receiving this because you commented.Message ID: @.***>

cxfajar avatar Apr 01 '23 14:04 cxfajar

Yes. I did all that that. No go. Even the internal connectors do not work.

rocheston avatar Apr 01 '23 15:04 rocheston

I think connectors are working. Did you check on the dashboard? On the left side there is a database symbol, and on top there is an option for connectors. By clicking on it, you can see whether your connectors are working or not. Actually, I am using Portainer for managing Docker composer, so I have not had any issues like that.

On Sat, 1 Apr 2023 at 8:23 PM, Rocheston @.***> wrote:

Yes. I did all that that. No go. Even the internal connectors do not work.

— Reply to this email directly, view it on GitHub https://github.com/OpenCTI-Platform/docker/issues/81#issuecomment-1493004165, or unsubscribe https://github.com/notifications/unsubscribe-auth/A63BIQ432VBRNR5YITC2TKLW7BCANANCNFSM6AAAAAAWPRYB3Q . You are receiving this because you commented.Message ID: @.***>

cxfajar avatar Apr 01 '23 15:04 cxfajar

@rocheston same for me. none of the connectors are working. They show up but no data ? did you get it working ?

image image

AmitKulkarni9 avatar Jun 25 '24 03:06 AmitKulkarni9

Does not work. I gave up on this tool. Useless.

rocheston avatar Jun 29 '24 05:06 rocheston