The ultimate support channel for all things MISP. Please come prepared. Bring log files and turn off SELinux. Please contribute your new knowledge to https://github.com/MISP/misp-book/tree/master/faq Error logs: /var/www/MISP/app/tmp/logs/error.log
MISP/app/tmp/logs
iirc
resque-worker-error.log
and resque-worker-[date].log
and tyvm @iglocska
directly setting the column will just cause issues and not have the intended effect
it is "possible" to disable all background processing
1 reply
but your requests will take a fair bit longer
would be better to figure out what's causing it
I remember you had that weird issue with your redis memory usage growing - we couldn't reproduce that, though we should dig deeper with you and perhaps set up a debug session to figure out what's going on there
300k jobs? What the hell
and I'm only publishing so the attributes are searchable outside of MISP , to make use of them operationally ,when publishing fails all those events are missed until it catches up again
i'll just flush all jobs and hope clearing redis made things better
I think part of it maybe that 16G ram isn't cutting it, but when redis is using 8GB ... maybe like you said there is a deeper issue, i'm just not familiar with redis to poke around and easily figure it out
it's gotten so bad, I have a script that looks at 500 errors in apache/misp logs and restarts apache every 10min (sort of improves things..until it doesn't :P )
Asking for a friend ;)
Virtual MISP Summit 0x06 - Thursday 21st October 2021.
Registration is now open.
Do you want to present or show how you use MISP, the call-for-papers is also open. #ThreatIntel #OpenSource #CTI See you there!
https://misp-project.org/misp-summit/
Registration is now open.
Do you want to present or show how you use MISP, the call-for-papers is also open. #ThreatIntel #OpenSource #CTI See you there!
https://misp-project.org/misp-summit/
Hi all, I'm having some issues implementing a custom decay model in MISP and would appreciate any insight. I've attempted to create JSON files based on the default decay models stored in the misp-decay-model directory and have tried to update the models in the GUI however they are not appearing. (I attempted the same way I did with uploading a custom taxonomy). I've also tried uploading the file from the GUI however it tells me that I do not have proper permissions to upload.
Hello, I'm looking for a way to integrate CACAO Security Playbooks into MISP. I can add Event, then add the attachment attribute and paste there the full CACAO Playbook (JSON). But I would also like to have the playbook metadata stored directly in the MISP event, so I'm thinking about adding a MISP object which would just copy the playbook metadata attributes. The problem I'm dealing with here is data redundancy, since it's still needed to attach the full CACAO playbook (omitting the metadata would make it invalid). What do you think about it?
1 reply
Hi Fellas , I hope you're good.
Unfortunatelly , I'm having problems with login to my MISP instance. (I tried to restart the core service for the WebUI (apache2) and I tried too to restart the server .. but I've the same problem .. The login page is showed through https /443 .. but when I try to put my user/pass , the login page stay load indefinitely. Do you know how can I to trace the error ?
Unfortunatelly , I'm having problems with login to my MISP instance. (I tried to restart the core service for the WebUI (apache2) and I tried too to restart the server .. but I've the same problem .. The login page is showed through https /443 .. but when I try to put my user/pass , the login page stay load indefinitely. Do you know how can I to trace the error ?
1 reply
I saw into the /var/www/MISP/app/log/ directory
for the errors, but i see nothing usefull to understand the problem here ..
I appreaciate any help that you can give me. So .. i wish you a great day !
Assuming default login (no SSO integration etc)? No disk space issues or things like that?
Hello bl4ckm4mb4 , can you login via ssh to the MISP instance and check if there is enough free space?
Logs that can shed some light:
/var/www/MISP/app/tmp/logs/error.log
/var/log/apache2/error.log
/var/log/apache2/misp.local_error.log
Logs that can shed some light:
/var/www/MISP/app/tmp/logs/error.log
/var/log/apache2/error.log
/var/log/apache2/misp.local_error.log
Hi Wachizungu , thanks for response ! My apache logs only display :
Sep 20 14:33:24 ss11080 /var/www/MISP/app/tmp/logs/[1646]: 2021-09-20 14:33:24 Notice: User (2): mail_user@company.com -- login
and the login page is stuck there. (i'm using default login, and the disk space appears to be fine on df output)
Thanks Luciano , root partition is 43% full