Created
November 9, 2016 12:52
-
-
Save bbouille/e74916651632877ea3f3d8983a93718c to your computer and use it in GitHub Desktop.
Run TheHive on OSX 10.12.1 with Docker
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
0) OSx and Docker up to date | |
1) Install elasticsearch (5.0.0) with homebrew : | |
brew update | |
brew cask install java | |
brew tap homebrew/services | |
brew install elasticsearch | |
2) Configure elasticsearch by editing /usr/local/etc/elasticsearch/elasticsearch.yml as follow. | |
Change the cluster name on line 17 : | |
cluster.name: hive | |
Add the following keys at the end of the file (new key format for 5.0.0) : | |
network.host: 127.0.0.1 | |
script.inline: on | |
thread_pool.index.queue_size: 100000 | |
thread_pool.search.queue_size: 100000 | |
thread_pool.listener.queue_size: 1000 | |
3) Start elasticsearch : | |
brew services restart elasticsearch | |
4) Start Docker container : | |
docker run --publish 127.0.0.1:9000:9000 --volume /Volumes/Media/Docker:/data certbdf/thehive:latest |
If it works with ES 5.x, I'll definitely give it a try. Thanks!
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Warning : TheHive officialy supports only ES 2.x