Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
  • Sep 27 09:25

    iglocska on master

    Some minor changes to the docum… (compare)

  • Sep 26 14:16
    adulau commented #284
  • Sep 26 14:15
    adulau closed #284
  • Sep 26 14:15

    adulau on main

    logical typo fixed help manual Merge pull request #284 from Co… (compare)

  • Sep 26 13:40
    Cooper-Dale opened #284
  • Sep 14 17:24
    adulau commented #283
  • Sep 14 17:24

    adulau on main

    chg: [synchronisation] clarify … Merge pull request #283 from Wa… (compare)

  • Sep 14 17:24
    adulau closed #283
  • Sep 14 15:45
    Wachizungu opened #283
  • Jun 30 14:58

    chrisr3d on main

    fix: [python doc] Updated instr… (compare)

  • Jun 27 04:44

    cvandeplas on main

    Fixes broken GH taxonomy links Merge pull request #282 from 00… (compare)

  • Jun 27 04:44
    cvandeplas closed #282
  • Jun 27 04:44
    cvandeplas commented #282
  • Jun 26 21:36
    00willo opened #282
  • Jun 02 12:32

    SteveClement on main

    chg: [doc] removed trailing spa… fix: [pdf] PDF conversion works… Merge branch 'MISP:main' into m… and 1 more (compare)

  • Jun 02 12:32
    SteveClement closed #281
  • Jun 02 12:31
    SteveClement opened #281
  • Jun 01 19:56

    SteveClement on main

    chg: [workflow] PDF fails, putt… chg: [workflow] PDF fails, remo… Merge branch 'MISP:main' into m… and 1 more (compare)

  • Jun 01 19:56
    SteveClement closed #280
  • Jun 01 19:56
    SteveClement opened #280
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
I appreaciate any help that you can give me. So .. i wish you a great day !
Jeroen Pinoy
@Wachizungu
your apache logs don't show anything either ?
Assuming default login (no SSO integration etc)? No disk space issues or things like that?
luciano (righel)
@luciano:matrix.circl.lu
[m]
Hello bl4ckm4mb4 , can you login via ssh to the MISP instance and check if there is enough free space?
Logs that can shed some light:
/var/www/MISP/app/tmp/logs/error.log
/var/log/apache2/error.log
/var/log/apache2/misp.local_error.log
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]

Hi Wachizungu , thanks for response ! My apache logs only display :

Sep 20 14:33:24 ss11080 /var/www/MISP/app/tmp/logs/[1646]: 2021-09-20 14:33:24 Notice: User (2): mail_user@company.com -- login

and the login page is stuck there. (i'm using default login, and the disk space appears to be fine on df output)

Thanks Luciano , root partition is 43% full
i will see theese logs that you suggest. Thanks for your help guys
luciano (righel)
@luciano:matrix.circl.lu
[m]
you could also verify mysql/mariadb is running.
sudo service mysql status
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
yes, it's running.. here is the output from systemctl status mysql :

misp@ss11080:~$ sudo systemctl status mysql
● mariadb.service - MariaDB 10.3.31 database server
Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor preset: enabled)
Active: active (running) since Mon 2021-09-20 14:23:21 UTC; 33min ago
Docs: man:mysqld(8)
https://mariadb.com/kb/en/library/systemd/
Process: 852 ExecStartPre=/usr/bin/install -m 755 -o mysql -g root -d /var/run/mysqld (code=exited, status=0/SUCCESS)
Process: 887 ExecStartPre=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited, status=0/SUCCESS)
Process: 894 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ] && VAR= || VAR=cd /usr/bin/..; /usr/bin/galera_recovery; [ $? -eq 0 ] && systemct>
Process: 1063 ExecStartPost=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited, status=0/SUCCESS)
Process: 1069 ExecStartPost=/etc/mysql/debian-start (code=exited, status=0/SUCCESS)
Main PID: 970 (mysqld)
Status: "Taking your SQL requests now..."
Tasks: 31 (limit: 19077)
Memory: 7.3G
CGroup: /system.slice/mariadb.service
└─970 /usr/sbin/mysqld

Sep 20 14:23:20 ss11080 mysqld[970]: 2021-09-20 14:23:20 0 [Note] /usr/sbin/mysqld (mysqld 10.3.31-MariaDB-0ubuntu0.20.04.1) starting as process 970 ...
Sep 20 14:23:21 ss11080 systemd[1]: Started MariaDB 10.3.31 database server.

srry

I 've one doubt .. my MISP instance have :

4 cpu's -- 16 gb RAM, and 300 GB DISK

I assume that the hardware requirements for a simple instance are OK .. it this right ?
luciano (righel)
@luciano:matrix.circl.lu
[m]
Yes, that's more than enough
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
great thank you ! .. I'm running on Ubuntu 20.04.3 LTS
andras
@andras:matrix.circl.lu
[m]
It's in /var/www/MISP/app/Config/config.php
1 reply
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]

Unexpectedly I have been able to log into the WebUI, (I left the browser window open trying to access for about 20 minutes), I have not modified any configuration since we started talking. I have only checked logs ..

I would appreciate if you have any ideas on how to improve this .. maybe it is some configuration about the correlations / events that are in my instance.

Any suggestion will be well received. I thank you all

I will do it , and see if the problem appears again , thank you so much Wachizungu, Luciano & Andras for your time & help
I really appreaciate that
andras
@andras:matrix.circl.lu
[m]
let us know if it does!
:)
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
I change the base url to https:internal_FQDN_of-the_server (i can access to the login page, but it still delaying the login fase)
about 8 minutes and still loading
andras
@andras:matrix.circl.lu
[m]
how does the CPU load look while that is happening?
1 reply
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
just now it returns me to the events page , it's normal to delaying 10 minutes ? or I've something bad configured ?
andras
@andras:matrix.circl.lu
[m]
definitely doesn't sound normal
interesting, could you fire up your mysql cli?
1 reply
luciano (righel)
@luciano:matrix.circl.lu
[m]
You could check log in into the database via cli and run show processlist; while the login is loading after submit
andras
@andras:matrix.circl.lu
[m]
exactly ;)
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
Sure guys , let me do it again
andras
@andras:matrix.circl.lu
[m]
mysql -u misp -p misp
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
I tried with mysql -u misp -p misp
jhaaja but didn't work
andras
@andras:matrix.circl.lu
[m]
what did it say?
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
andras
@andras:matrix.circl.lu
[m]
sounds like you've got the wrong pw ;)
cat /var/www/MISP/app/Config/database.php | grep password
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
thanks for troubleshooting this with me , you're the best , please if you've get me the link to buy you a coffe/beer , you win it !
andras
@andras:matrix.circl.lu
[m]
haha! No worries at all
1 reply
bl4ckm4mb4
@bl4ckm4mb4:matrix.org
[m]
this is the output when I'm loged in .. so i will try the same , but at the login page
Here is the output from show processlist; when I'm trying to login to WebUI
andras
@andras:matrix.circl.lu
[m]
ok bummer, that's indeed something that's been plaguing us recently. Working on a fix for it for a while but temporarily it's on hold. As a quick remedy:
edit your /var/www/MISP/app/Config/config.php
you should have a setting called showCorrelationsOnIndex
1 reply
set that to 0