Skip to content

Instantly share code, notes, and snippets.

@bbouille
Created November 9, 2016 12:52
Show Gist options
  • Save bbouille/e74916651632877ea3f3d8983a93718c to your computer and use it in GitHub Desktop.
Save bbouille/e74916651632877ea3f3d8983a93718c to your computer and use it in GitHub Desktop.
Run TheHive on OSX 10.12.1 with Docker
0) OSx and Docker up to date
1) Install elasticsearch (5.0.0) with homebrew :
brew update
brew cask install java
brew tap homebrew/services
brew install elasticsearch
2) Configure elasticsearch by editing /usr/local/etc/elasticsearch/elasticsearch.yml as follow.
Change the cluster name on line 17 :
cluster.name: hive
Add the following keys at the end of the file (new key format for 5.0.0) :
network.host: 127.0.0.1
script.inline: on
thread_pool.index.queue_size: 100000
thread_pool.search.queue_size: 100000
thread_pool.listener.queue_size: 1000
3) Start elasticsearch :
brew services restart elasticsearch
4) Start Docker container :
docker run --publish 127.0.0.1:9000:9000 --volume /Volumes/Media/Docker:/data certbdf/thehive:latest
@bbouille
Copy link
Author

bbouille commented Nov 9, 2016

Warning : TheHive officialy supports only ES 2.x

@valorcz
Copy link

valorcz commented Nov 10, 2016

If it works with ES 5.x, I'll definitely give it a try. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment