Skip to content

File storage configuration#

TheHive can be configured to use local or distributed filesystems.

Example

  1. Create dedicated folder ; it should belong to user and group thehive:thehive.

    mkdir /opt/thp/thehive/files
chown thehive:thehive /opt/thp/thehive/files

  2. Configure TheHive accordingly:

    ## Attachment storage configuration
storage {
  ## Local filesystem
  provider: localfs
  localfs {
    location: /opt/thp/thehive/files
  }
}

  1. Install a Min.IO cluster

  2. Configure each node of TheHive accordingly: 

    ## Attachment storage configuration
storage {
  provider: s3
  s3 {
    bucket = "thehive"
    readTimeout = 1 minute
    writeTimeout = 1 minute
    chunkSize = 1 MB
    endpoint = "http://10.1.2.4:9100"
    accessKey = "thehive"
    secretKey = "minio_password"
    region = "us-east-1"
  }
}

alpakka.s3.path-style-access = force

    us-east-1 is the default region if none has been specified in MinIO configuration. In this case, this parameter is optional.

  1. Install an Apache Hadoop server

  2. Configure each node of TheHive accordingly (/etc/thehive/application.conf): 

    ## Attachment storage configuration
## Hadoop filesystem (HDFS)
provider: hdfs
hdfs {
  root: "hdfs://10.1.2.4:10000" # namenode server hostname
  location: "/thehive"           # location inside HDFS
  username: thehive              # file owner
  }
}
Last update: October 13, 2023 07:01:35