Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug] TheHive 4.0 Slow response for some calls #1465

Closed
crackytsi opened this issue Aug 6, 2020 · 5 comments
Closed

[Bug] TheHive 4.0 Slow response for some calls #1465

crackytsi opened this issue Aug 6, 2020 · 5 comments
Assignees
@To-om
Labels
bug scope:performance TheHive4 TheHive4 related issues

Comments

@crackytsi
Copy link

crackytsi commented Aug 6, 2020 •
edited
Loading

Bug

Work Environment

Question Answer
OS version (server) Debian
OS version (client) 10
TheHive version / git hash 4.0
Package Type DEB

Problem Description

I installed TheHive 4.0 and migrated arround 9000 Cases into the system.
After that, the performance is on a 8 core system still very bad.
There are 2 major issues I found:

  • Downloading the cases page takes arround 12 seconds (e.g. if you browse to a new page)
    image
    Interestingly, the application.log tells generation times, that are much faster:
    2020-08-06 02:44:50,809 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [000003db|] 192.168.97.10 POST /api/v1/query?name=cases took 40ms and returned 200

  • Status page and stream take very long to respond:
    2020-08-06 00:48:13,204 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000296|] 192.168.97.10 GET /api/stream/bayUM1q8DjeVcqrmptfW took 60019ms and returned 200 2 bytes

  • Alerts take long to respond:
    2020-08-06 05:07:18,108 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000454a|] 192.168.97.10 POST /api/v1/query?name=unread-alert-count took 4073ms and returned 200 4 bytes

Some more logs:

2020-08-06 00:37:35,003 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1928 [000001de|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:38:35,277 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1949 [000001df|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:39:20,603 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [000001e0|] 192.168.97.10 GET /index.html took 245ms and returned 200 1191 bytes
2020-08-06 00:39:20,785 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1948 [000001e1|] 192.168.97.10 GET /styles/vendor.7dd02a27.css took 11ms and returned 200 279814 bytes
2020-08-06 00:39:20,790 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [000001e2|] 192.168.97.10 GET /styles/app.dcf5211c.css took 14ms and returned 200 122377 bytes
2020-08-06 00:39:20,890 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [000001e4|] 192.168.97.10 GET /scripts/scripts.6cde7d53.js took 11ms and returned 200 636889 bytes
2020-08-06 00:39:20,892 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [000001e3|] 192.168.97.10 GET /scripts/vendor.e8efd510.js took 15ms and returned 200 2032121 bytes
2020-08-06 00:39:21,124 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [000001e5|] 192.168.97.10 GET /index.html took 5ms and returned 200 1191 bytes
2020-08-06 00:39:21,224 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [000001e7|] 192.168.97.10 GET /styles/app.dcf5211c.css took 5ms and returned 200 122377 bytes
2020-08-06 00:39:21,228 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [000001e6|] 192.168.97.10 GET /styles/vendor.7dd02a27.css took 9ms and returned 200 279814 bytes
2020-08-06 00:39:21,236 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [000001e8|] 192.168.97.10 GET /scripts/vendor.e8efd510.js took 10ms and returned 200 2032121 bytes
2020-08-06 00:39:21,241 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [000001e9|] 192.168.97.10 GET /scripts/scripts.6cde7d53.js took 6ms and returned 200 636889 bytes
2020-08-06 00:39:21,376 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [000001ea|] 192.168.97.10 GET /fonts/SourceSansPro-Regular.otf took 9ms and returned 304 0 bytes
2020-08-06 00:39:21,943 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1948 [000001ed|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:39:23,080 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [000001eb|] 192.168.97.10 GET /api/config/organisation/ui.hideEmptyCaseButton took 1118ms and returned 200 68 bytes
2020-08-06 00:39:23,225 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [000001ec|] 192.168.97.10 GET /api/v1/user/current took 1263ms and returned 200 658 bytes
2020-08-06 00:39:23,406 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [000001ef|] 192.168.97.10 GET /api/v1/user/current took 99ms and returned 200 658 bytes
2020-08-06 00:39:23,609 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [000001f4|] 192.168.97.10 GET /fonts/fontawesome-webfont.woff2?v=4.7.0 took 10ms and returned 304 0 bytes
2020-08-06 00:39:23,615 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [000001f1|] 192.168.97.10 POST /api/stream took 114ms and returned 200 20 bytes
2020-08-06 00:39:23,674 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [000001f5|] 192.168.97.10 GET /fonts/SourceSansPro-Bold.otf took 8ms and returned 304 0 bytes
2020-08-06 00:39:24,123 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [000001f3|] 192.168.97.10 POST /api/v1/query?name=my-tasks.stats took 614ms and returned 200 1 bytes
2020-08-06 00:39:24,503 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [000001f7|] 192.168.97.10 POST /api/v1/query?name=unread-alert-count took 784ms and returned 200 1 bytes
2020-08-06 00:39:24,669 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [000001f9|] 192.168.97.10 GET /api/organisation took 114ms and returned 200 350 bytes
2020-08-06 00:39:24,686 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [000001f2|] 192.168.97.10 POST /api/v0/query took 1186ms and returned 200
2020-08-06 00:39:24,686 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [000001f0|] 192.168.97.10 POST /api/v1/query took 1210ms and returned 200
2020-08-06 00:39:24,689 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1948 [000001f8|] 192.168.97.10 GET /api/customField took 513ms and returned 200 2055 bytes
2020-08-06 00:39:24,692 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [000001ee|] 192.168.97.10 POST /api/v1/query took 1346ms and returned 200
2020-08-06 00:39:24,742 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1948 [000001fb|] 192.168.97.10 GET /images/logo.white.svg took 8ms and returned 304 0 bytes
2020-08-06 00:39:24,797 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [000001fc|] 192.168.97.10 GET /fonts/SourceSansPro-It.otf took 12ms and returned 304 0 bytes
2020-08-06 00:39:24,822 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [000001fa|] 192.168.97.10 GET /api/v1/user/40964320/avatar/b0aabb6c4d9b086c64ac5ddcaa63b40d3eea6b3ac70aa628a39526b5fecfa9ac took 99ms and returned 200 5577 bytes
2020-08-06 00:39:24,986 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [000001ff|] 192.168.97.10 GET /api/v1/user/[email protected] took 104ms and returned 200 275 bytes
2020-08-06 00:39:25,007 [WARN] from org.thp.scalligraph.ErrorHandler in application-akka.actor.default-dispatcher-1951 [000001fe|] GET /api/v1/user/[email protected] returned 404
org.thp.scalligraph.NotFoundError: User not found
        at org.thp.scalligraph.steps.StepsOps$TraversalOps.$anonfun$getOrFail$1(StepsOps.scala:384)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.steps.StepsOps$TraversalOps.getOrFail(StepsOps.scala:384)
        at org.thp.thehive.controllers.v1.UserCtrl.$anonfun$get$2(UserCtrl.scala:130)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$authRoTransaction$2(Entrypoint.scala:136)
        at org.thp.scalligraph.janus.JanusDatabase.roTransaction(JanusDatabase.scala:133)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$authRoTransaction$1(Entrypoint.scala:136)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$auth$1(Entrypoint.scala:86)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$asyncAuth$3(Entrypoint.scala:107)
        at org.scalactic.Good.fold(Or.scala:1229)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$asyncAuth$2(Entrypoint.scala:107)
        at org.thp.scalligraph.DiagnosticContext$.$anonfun$withRequest$2(ContextPropagatingDisptacher.scala:99)
        at org.thp.scalligraph.DiagnosticContext$.saveDiagnosticContext(ContextPropagatingDisptacher.scala:106)
        at org.thp.scalligraph.DiagnosticContext$.withRequest(ContextPropagatingDisptacher.scala:97)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$asyncAuth$1(Entrypoint.scala:107)
        at org.thp.scalligraph.auth.HeaderAuthSrv$$anon$1.$anonfun$invokeBlock$3(HeaderAuthenticateSrv.scala:27)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.auth.HeaderAuthSrv$$anon$1.invokeBlock(HeaderAuthenticateSrv.scala:26)
        at org.thp.scalligraph.auth.HeaderAuthSrv$$anon$1.invokeBlock(HeaderAuthenticateSrv.scala:20)
        at org.thp.scalligraph.auth.BasicAuthSrv$$anon$1.$anonfun$invokeBlock$1(BasicAuthSrv.scala:52)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.auth.BasicAuthSrv$$anon$1.invokeBlock(BasicAuthSrv.scala:52)
        at org.thp.scalligraph.auth.BasicAuthSrv$$anon$1.invokeBlock(BasicAuthSrv.scala:50)
        at org.thp.scalligraph.auth.SessionAuthSrv$$anon$1.$anonfun$invokeBlock$1(SessionAuthSrv.scala:87)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.auth.SessionAuthSrv$$anon$1.invokeBlock(SessionAuthSrv.scala:87)
        at org.thp.scalligraph.auth.SessionAuthSrv$$anon$1.invokeBlock(SessionAuthSrv.scala:84)
        at play.api.mvc.ActionBuilder$$anon$10.$anonfun$invokeBlock$2(Action.scala:408)
        at play.api.mvc.ActionBuilderImpl.invokeBlock(Action.scala:441)
        at play.api.mvc.ActionBuilderImpl.invokeBlock(Action.scala:439)
        at play.api.mvc.ActionBuilder$$anon$10.invokeBlock(Action.scala:408)
        at play.api.mvc.ActionBuilder$$anon$10.invokeBlock(Action.scala:404)
        at play.api.mvc.ActionBuilder$$anon$9.apply(Action.scala:379)
        at play.api.mvc.Action.$anonfun$apply$4(Action.scala:82)
        at play.api.libs.streams.StrictAccumulator.$anonfun$mapFuture$4(Accumulator.scala:168)
        at scala.util.Try$.apply(Try.scala:213)
        at play.api.libs.streams.StrictAccumulator.$anonfun$mapFuture$3(Accumulator.scala:168)
        at scala.Function1.$anonfun$andThen$1(Function1.scala:57)
        at scala.Function1.$anonfun$andThen$1(Function1.scala:57)
        at play.api.libs.streams.StrictAccumulator.run(Accumulator.scala:199)
        at play.core.server.AkkaHttpServer.$anonfun$runAction$4(AkkaHttpServer.scala:416)
        at akka.http.scaladsl.util.FastFuture$.strictTransform$1(FastFuture.scala:41)
        at akka.http.scaladsl.util.FastFuture$.$anonfun$transformWith$3(FastFuture.scala:51)
        at scala.concurrent.impl.CallbackRunnable.run(Promise.scala:64)
        at org.thp.scalligraph.ContextPropagatingDisptacher$$anon$1.$anonfun$execute$2(ContextPropagatingDisptacher.scala:56)
        at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.java:23)
        at org.thp.scalligraph.DiagnosticContext$$anon$2.withContext(ContextPropagatingDisptacher.scala:75)
        at org.thp.scalligraph.ContextPropagatingDisptacher$$anon$1.$anonfun$execute$1(ContextPropagatingDisptacher.scala:56)
        at akka.dispatch.TaskInvocation.run(AbstractDispatcher.scala:48)
        at akka.dispatch.ForkJoinExecutorConfigurator$AkkaForkJoinTask.exec(ForkJoinExecutorConfigurator.scala:48)
        at java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:289)
        at java.util.concurrent.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1056)
        at java.util.concurrent.ForkJoinPool.runWorker(ForkJoinPool.java:1692)
        at java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:157)
2020-08-06 00:39:25,009 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [000001fe|] 192.168.97.10 GET /api/v1/user/[email protected] took 149ms and returned 404 51 bytes
2020-08-06 00:39:25,056 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000200|] 192.168.97.10 GET /images/cortex-logo.svg took 12ms and returned 304 0 bytes
2020-08-06 00:39:25,062 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [00000201|] 192.168.97.10 GET /images/misp-logo.svg took 6ms and returned 304 0 bytes
2020-08-06 00:39:25,260 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [000001f6|] 192.168.97.10 POST /api/v1/query?name=waiting-tasks.stats took 1591ms and returned 200 1 bytes
2020-08-06 00:39:32,424 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000202|] 192.168.97.10 GET /api/v1/user/current took 79ms and returned 200 682 bytes
2020-08-06 00:39:32,546 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000203|] 192.168.97.10 GET /api/v1/user/current took 70ms and returned 200 682 bytes
2020-08-06 00:39:32,601 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000204|] 192.168.97.10 GET /fonts/glyphicons-halflings-regular.woff2 took 9ms and returned 304 0 bytes
2020-08-06 00:39:32,702 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000205|] 192.168.97.10 POST /api/v1/query took 91ms and returned 200
2020-08-06 00:39:32,739 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000206|] 192.168.97.10 GET /api/v1/user/current took 96ms and returned 200 682 bytes
2020-08-06 00:39:32,867 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000209|] 192.168.97.10 POST /api/v0/query took 63ms and returned 200
2020-08-06 00:39:32,870 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000208|] 192.168.97.10 POST /api/stream took 71ms and returned 200 20 bytes
2020-08-06 00:39:32,916 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000207|] 192.168.97.10 POST /api/v1/query took 122ms and returned 200
2020-08-06 00:39:33,045 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000020c|] 192.168.97.10 POST /api/v1/query?name=unread-alert-count took 131ms and returned 200 1 bytes
2020-08-06 00:39:33,546 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000020b|] 192.168.97.10 POST /api/v1/query?name=my-tasks.stats took 642ms and returned 200 2 bytes
2020-08-06 00:39:34,287 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000020a|] 192.168.97.10 POST /api/v1/query?name=waiting-tasks.stats took 1386ms and returned 200 3 bytes
2020-08-06 00:39:34,342 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000020f|] 192.168.97.10 GET /api/v1/describe/_all took 33ms and returned 200 7206 bytes
2020-08-06 00:39:34,879 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000212|] 192.168.97.10 POST /api/v1/query?name=cases took 202ms and returned 200
2020-08-06 00:39:42,605 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000020e|] 192.168.97.10 POST /api/v1/query?name=case-count-stats took 9018ms and returned 200 4 bytes
2020-08-06 00:39:53,354 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [00000213|] 192.168.97.10 POST /api/v1/query?name=cases.count took 18548ms and returned 200 3 bytes
2020-08-06 00:39:54,463 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000215|] 192.168.97.10 GET /api/v1/user/8368/avatar/e7c508ef4bd058132efe8fe1a48df4c0322e231f0647faf28e9374907e1e0bff took 63ms and returned 200 6187 bytes
2020-08-06 00:39:54,465 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000214|] 192.168.97.10 GET /api/v1/user/41048/avatar/3196c1194527c5efdc8b25246e3a20178fc8a97731518849cf35d4cd6626441c took 67ms and returned 200 8715 bytes
2020-08-06 00:39:54,560 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000217|] 192.168.97.10 GET /api/v1/user/4288/avatar/1e2953abf0302077d9de45a3681630766501d10326cc22386d3a854f7635556a took 48ms and returned 200 4838 bytes
2020-08-06 00:39:54,573 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000218|] 192.168.97.10 GET /api/v1/user/12464/avatar/f1df2b3f570bb694d02ce7f0b6d1d45b836cd50942562e3901783994461bbb72 took 59ms and returned 200 3747 bytes
2020-08-06 00:39:54,577 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000216|] 192.168.97.10 GET /api/v1/user/28864/avatar/64738ac16ebbb8d6825102e052c9be70cb5b3dfd07d342560793564448ac1d22 took 69ms and returned 200 5499 bytes
2020-08-06 00:39:54,636 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000219|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 32ms and returned 200 8744 bytes
2020-08-06 00:39:58,485 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000020d|] 192.168.97.10 POST /api/v1/query?name=case-status-stats took 25395ms and returned 200 48 bytes
2020-08-06 00:40:08,744 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000021a|] 192.168.97.10 POST /api/v1/query?name=cases took 50ms and returned 200
2020-08-06 00:40:23,642 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000021b|] 192.168.97.10 GET /api/status took 1ms and returned 200 275 bytes
2020-08-06 00:40:24,910 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [000001fd|] 192.168.97.10 GET /api/stream/aicqgp1iTNgzTLK2wSBH took 60058ms and returned 200 2 bytes
2020-08-06 00:40:29,645 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [0000021c|] 192.168.97.10 GET /api/v1/user/8280/avatar/4f20738ddd098139be0da0b71f24bdf748774e162c22d9a01129b7fe4fb8938f took 46ms and returned 200 7341 bytes
2020-08-06 00:40:29,741 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000021d|] 192.168.97.10 GET /api/v1/user/61592/avatar/4d5a30a234363274f1a6f04684b82d0e1615a9b4b5a3eb36b0d3d74570b1bf57 took 49ms and returned 200 4451 bytes
2020-08-06 00:40:32,816 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000021e|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes
2020-08-06 00:40:34,404 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000211|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60014ms and returned 200 2 bytes
2020-08-06 00:41:23,665 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000221|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes
2020-08-06 00:41:26,220 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000222|] 192.168.97.10 GET /styles/vendor.7dd02a27.css took 4ms and returned 200 279814 bytes
2020-08-06 00:41:26,319 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000223|] 192.168.97.10 GET /styles/app.dcf5211c.css took 3ms and returned 200 122377 bytes
2020-08-06 00:41:32,933 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000224|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:41:34,484 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000021f|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60021ms and returned 200 2 bytes
2020-08-06 00:41:38,709 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000226|] 192.168.97.10 POST /api/v1/query?name=cases took 50ms and returned 200
2020-08-06 00:41:45,705 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000227|] 192.168.97.10 POST /api/v1/query?name=cases took 52ms and returned 200
2020-08-06 00:42:00,328 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000228|] 192.168.97.10 GET /api/v1/user/53400/avatar/bd9b796bb7ce58e53cf51c7669ba6eb4addda73ebfdfbfc8d8a3eb9f6375333e took 61ms and returned 200 5500 bytes
2020-08-06 00:42:07,955 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000022a|] 192.168.97.10 GET /api/v1/user/16408/avatar/67092e276e04b3880e1be40308d86df1c345e71ef5bf87a2fd3ecf593b940420 took 46ms and returned 200 4378 bytes
2020-08-06 00:42:07,956 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000229|] 192.168.97.10 GET /api/v1/user/40984/avatar/f4ddf2ce0b8db4e59f73184229d7d4c9fd1ab1097e543e0712c96c7892724d94 took 51ms and returned 200 5311 bytes
2020-08-06 00:42:08,076 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000022b|] 192.168.97.10 GET /api/v1/user/28864/avatar/64738ac16ebbb8d6825102e052c9be70cb5b3dfd07d342560793564448ac1d22 took 58ms and returned 200 5499 bytes
2020-08-06 00:42:08,076 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000022c|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 52ms and returned 200 8744 bytes
2020-08-06 00:42:08,089 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000022d|] 192.168.97.10 GET /api/v1/user/41048/avatar/3196c1194527c5efdc8b25246e3a20178fc8a97731518849cf35d4cd6626441c took 62ms and returned 200 8715 bytes
2020-08-06 00:42:12,795 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000022e|] 192.168.97.10 POST /api/v1/query?name=cases took 46ms and returned 200
2020-08-06 00:42:21,889 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000022f|] 192.168.97.10 POST /api/v1/query?name=cases took 48ms and returned 200
2020-08-06 00:42:23,620 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000230|] 192.168.97.10 GET /api/status took 7ms and returned 200 275 bytes
2020-08-06 00:42:23,735 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000231|] 192.168.97.10 POST /api/v1/query?name=cases took 58ms and returned 200
2020-08-06 00:42:32,918 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000232|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes
2020-08-06 00:42:34,595 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000225|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60014ms and returned 200 2 bytes
2020-08-06 00:42:43,748 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000234|] 192.168.97.10 GET /api/v1/user/8368/avatar/e7c508ef4bd058132efe8fe1a48df4c0322e231f0647faf28e9374907e1e0bff took 56ms and returned 200 6187 bytes
2020-08-06 00:42:43,841 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000235|] 192.168.97.10 GET /api/v1/user/8280/avatar/4f20738ddd098139be0da0b71f24bdf748774e162c22d9a01129b7fe4fb8938f took 48ms and returned 200 7341 bytes
2020-08-06 00:42:45,150 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000238|] 192.168.97.10 GET /api/v1/user/41048/avatar/3196c1194527c5efdc8b25246e3a20178fc8a97731518849cf35d4cd6626441c took 64ms and returned 200 8715 bytes
2020-08-06 00:42:45,154 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [00000237|] 192.168.97.10 GET /api/v1/user/16408/avatar/67092e276e04b3880e1be40308d86df1c345e71ef5bf87a2fd3ecf593b940420 took 70ms and returned 200 4378 bytes
2020-08-06 00:42:45,164 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [00000236|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 82ms and returned 200 8744 bytes
2020-08-06 00:43:00,229 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000239|] 192.168.97.10 POST /api/v1/query?name=cases took 47ms and returned 200
2020-08-06 00:43:21,661 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000023a|] 192.168.97.10 GET /api/v1/user/12464/avatar/f1df2b3f570bb694d02ce7f0b6d1d45b836cd50942562e3901783994461bbb72 took 52ms and returned 200 3747 bytes
2020-08-06 00:43:21,746 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000023b|] 192.168.97.10 GET /api/v1/user/61592/avatar/4d5a30a234363274f1a6f04684b82d0e1615a9b4b5a3eb36b0d3d74570b1bf57 took 41ms and returned 200 4451 bytes
2020-08-06 00:43:23,548 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000023c|] 192.168.97.10 GET /api/status took 1ms and returned 200 275 bytes
2020-08-06 00:43:32,932 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [0000023d|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes
2020-08-06 00:43:34,684 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000233|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60019ms and returned 200 2 bytes
2020-08-06 00:43:45,507 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000023f|] 192.168.97.10 POST /api/v1/query?name=cases took 50ms and returned 200
2020-08-06 00:43:56,518 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000240|] 192.168.97.10 POST /api/v1/query?name=cases took 43ms and returned 200
2020-08-06 00:43:59,096 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000241|] 192.168.97.10 POST /api/v1/query?name=cases took 51ms and returned 200
2020-08-06 00:44:04,521 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000242|] 192.168.97.10 GET /api/v1/user/8368/avatar/e7c508ef4bd058132efe8fe1a48df4c0322e231f0647faf28e9374907e1e0bff took 69ms and returned 200 6187 bytes
2020-08-06 00:44:04,612 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000243|] 192.168.97.10 GET /api/v1/user/8280/avatar/4f20738ddd098139be0da0b71f24bdf748774e162c22d9a01129b7fe4fb8938f took 60ms and returned 200 7341 bytes
2020-08-06 00:44:07,049 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000244|] 192.168.97.10 POST /api/v1/query?name=cases took 48ms and returned 200
2020-08-06 00:44:18,309 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000245|] 192.168.97.10 POST /api/v1/query?name=cases took 134ms and returned 200
2020-08-06 00:44:19,855 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000246|] 192.168.97.10 GET /api/v1/user/53400/avatar/bd9b796bb7ce58e53cf51c7669ba6eb4addda73ebfdfbfc8d8a3eb9f6375333e took 59ms and returned 200 5500 bytes
2020-08-06 00:44:21,532 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000248|] 192.168.97.10 GET /api/v1/user/28864/avatar/64738ac16ebbb8d6825102e052c9be70cb5b3dfd07d342560793564448ac1d22 took 29ms and returned 200 5499 bytes
2020-08-06 00:44:21,533 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000247|] 192.168.97.10 GET /api/v1/user/40984/avatar/f4ddf2ce0b8db4e59f73184229d7d4c9fd1ab1097e543e0712c96c7892724d94 took 30ms and returned 200 5311 bytes
2020-08-06 00:44:21,606 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000249|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 27ms and returned 200 8744 bytes
2020-08-06 00:44:21,608 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000024a|] 192.168.97.10 GET /api/v1/user/16408/avatar/67092e276e04b3880e1be40308d86df1c345e71ef5bf87a2fd3ecf593b940420 took 29ms and returned 200 4378 bytes
2020-08-06 00:44:21,629 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000024b|] 192.168.97.10 GET /api/v1/user/41048/avatar/3196c1194527c5efdc8b25246e3a20178fc8a97731518849cf35d4cd6626441c took 29ms and returned 200 8715 bytes
2020-08-06 00:44:21,873 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000024c|] 192.168.97.10 POST /api/v1/query?name=cases took 34ms and returned 200
2020-08-06 00:44:23,534 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000024d|] 192.168.97.10 GET /api/status took 9ms and returned 200 275 bytes
2020-08-06 00:44:29,509 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000024e|] 192.168.97.10 POST /api/v1/query?name=cases took 49ms and returned 200
2020-08-06 00:44:32,928 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000024f|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes
2020-08-06 00:44:34,416 [ERROR] from org.thp.scalligraph.ErrorHandler in application-akka.actor.default-dispatcher-1967 [|] Internal error
akka.pattern.AskTimeoutException: Ask timed out on [Actor[akka://application/user/flowSingletonProxy#-984707864]] after [300000 ms]. Message of type [org.thp.thehive.services.FlowActor$FlowId]. A typical reason for `AskTimeoutException` is that the recipient actor didn't send a reply.
        at akka.pattern.PromiseActorRef$.$anonfun$defaultOnTimeout$1(AskSupport.scala:647)
        at akka.pattern.PromiseActorRef$.$anonfun$apply$1(AskSupport.scala:668)
        at akka.actor.Scheduler$$anon$7.run(Scheduler.scala:476)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.unbatchedExecute(SameThreadExecutionContext.scala:21)
        at akka.dispatch.BatchingExecutor.execute(BatchingExecutor.scala:126)
        at akka.dispatch.BatchingExecutor.execute$(BatchingExecutor.scala:117)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.execute(SameThreadExecutionContext.scala:20)
        at akka.actor.LightArrayRevolverScheduler$TaskHolder.executeTask(LightArrayRevolverScheduler.scala:358)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.executeBucket$1(LightArrayRevolverScheduler.scala:309)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.nextTick(LightArrayRevolverScheduler.scala:313)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.run(LightArrayRevolverScheduler.scala:265)
        at java.lang.Thread.run(Thread.java:748)
2020-08-06 00:44:34,416 [WARN] from org.thp.scalligraph.ErrorHandler in application-akka.actor.default-dispatcher-1967 [|] GET /api/flow?count=10&rootId=any returned 500
akka.pattern.AskTimeoutException: Ask timed out on [Actor[akka://application/user/flowSingletonProxy#-984707864]] after [300000 ms]. Message of type [org.thp.thehive.services.FlowActor$FlowId]. A typical reason for `AskTimeoutException` is that the recipient actor didn't send a reply.
        at akka.pattern.PromiseActorRef$.$anonfun$defaultOnTimeout$1(AskSupport.scala:647)
        at akka.pattern.PromiseActorRef$.$anonfun$apply$1(AskSupport.scala:668)
        at akka.actor.Scheduler$$anon$7.run(Scheduler.scala:476)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.unbatchedExecute(SameThreadExecutionContext.scala:21)
        at akka.dispatch.BatchingExecutor.execute(BatchingExecutor.scala:126)
        at akka.dispatch.BatchingExecutor.execute$(BatchingExecutor.scala:117)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.execute(SameThreadExecutionContext.scala:20)
        at akka.actor.LightArrayRevolverScheduler$TaskHolder.executeTask(LightArrayRevolverScheduler.scala:358)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.executeBucket$1(LightArrayRevolverScheduler.scala:309)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.nextTick(LightArrayRevolverScheduler.scala:313)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.run(LightArrayRevolverScheduler.scala:265)
        at java.lang.Thread.run(Thread.java:748)
2020-08-06 00:44:34,784 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000023e|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60025ms and returned 200 2 bytes
2020-08-06 00:44:39,401 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000251|] 192.168.97.10 GET /api/v1/user/16576/avatar/752ac7db981f41676ce5a423084be8dc40b11d61a5efab9139024e04d65a429f took 49ms and returned 200 2748 bytes
2020-08-06 00:44:39,512 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000252|] 192.168.97.10 GET /api/v1/user/4288/avatar/1e2953abf0302077d9de45a3681630766501d10326cc22386d3a854f7635556a took 59ms and returned 200 4838 bytes
2020-08-06 00:44:39,604 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000253|] 192.168.97.10 GET /api/v1/user/8368/avatar/e7c508ef4bd058132efe8fe1a48df4c0322e231f0647faf28e9374907e1e0bff took 46ms and returned 200 6187 bytes
2020-08-06 00:44:42,365 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000254|] 192.168.97.10 POST /api/v1/query?name=cases took 41ms and returned 200
2020-08-06 00:44:43,855 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000255|] 192.168.97.10 GET /api/v1/user/57488/avatar/1b8370a4aa2fa4fc132e9e6d487a752527835007cc8d693e35d916ee53ee6fd5 took 47ms and returned 200 5151 bytes
2020-08-06 00:44:43,855 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000256|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 46ms and returned 200 8744 bytes
2020-08-06 00:44:45,117 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000257|] 192.168.97.10 POST /api/v1/query?name=cases took 46ms and returned 200
2020-08-06 00:45:02,144 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000258|] 192.168.97.10 POST /api/v1/query?name=cases took 59ms and returned 200
2020-08-06 00:45:04,065 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000259|] 192.168.97.10 POST /api/v1/query?name=cases took 55ms and returned 200
2020-08-06 00:45:04,902 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000025a|] 192.168.97.10 GET /api/v1/user/16408/avatar/67092e276e04b3880e1be40308d86df1c345e71ef5bf87a2fd3ecf593b940420 took 52ms and returned 200 4378 bytes
2020-08-06 00:45:05,019 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000025b|] 192.168.97.10 GET /api/v1/user/28864/avatar/64738ac16ebbb8d6825102e052c9be70cb5b3dfd07d342560793564448ac1d22 took 63ms and returned 200 5499 bytes
2020-08-06 00:45:05,025 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000025c|] 192.168.97.10 GET /api/v1/user/12464/avatar/f1df2b3f570bb694d02ce7f0b6d1d45b836cd50942562e3901783994461bbb72 took 62ms and returned 200 3747 bytes
2020-08-06 00:45:06,085 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000025d|] 192.168.97.10 POST /api/v1/query?name=cases took 51ms and returned 200
2020-08-06 00:45:08,196 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000025f|] 192.168.97.10 GET /api/v1/user/53400/avatar/bd9b796bb7ce58e53cf51c7669ba6eb4addda73ebfdfbfc8d8a3eb9f6375333e took 63ms and returned 200 5500 bytes
2020-08-06 00:45:08,212 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000025e|] 192.168.97.10 GET /api/v1/user/40984/avatar/f4ddf2ce0b8db4e59f73184229d7d4c9fd1ab1097e543e0712c96c7892724d94 took 82ms and returned 200 5311 bytes
2020-08-06 00:45:12,423 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000260|] 192.168.97.10 POST /api/v1/query?name=cases took 43ms and returned 200
2020-08-06 00:45:23,620 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000261|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:45:25,976 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [00000263|] 192.168.97.10 GET /api/v1/user/16408/avatar/67092e276e04b3880e1be40308d86df1c345e71ef5bf87a2fd3ecf593b940420 took 52ms and returned 200 4378 bytes
2020-08-06 00:45:25,981 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000262|] 192.168.97.10 GET /api/v1/user/24672/avatar/928a8f8e763a9a81e7d29bc22e446142a5c122755b2c0b23757d9ea9d4713dbd took 58ms and returned 200 3504 bytes
2020-08-06 00:45:26,062 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000264|] 192.168.97.10 GET /api/v1/user/41048/avatar/3196c1194527c5efdc8b25246e3a20178fc8a97731518849cf35d4cd6626441c took 42ms and returned 200 8715 bytes
2020-08-06 00:45:27,636 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000265|] 192.168.97.10 GET /api/v1/user/61592/avatar/4d5a30a234363274f1a6f04684b82d0e1615a9b4b5a3eb36b0d3d74570b1bf57 took 57ms and returned 200 4451 bytes
2020-08-06 00:45:27,638 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000267|] 192.168.97.10 GET /api/v1/user/8368/avatar/e7c508ef4bd058132efe8fe1a48df4c0322e231f0647faf28e9374907e1e0bff took 55ms and returned 200 6187 bytes
2020-08-06 00:45:27,646 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000266|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 64ms and returned 200 8744 bytes
2020-08-06 00:45:29,276 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000268|] 192.168.97.10 GET /api/v1/user/8280/avatar/4f20738ddd098139be0da0b71f24bdf748774e162c22d9a01129b7fe4fb8938f took 58ms and returned 200 7341 bytes
2020-08-06 00:45:31,144 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000269|] 192.168.97.10 POST /api/v1/query?name=cases took 49ms and returned 200
2020-08-06 00:45:32,930 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000026a|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes
2020-08-06 00:45:34,854 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000250|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60016ms and returned 200 2 bytes
2020-08-06 00:45:35,408 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000026d|] 192.168.97.10 GET /api/v1/user/12464/avatar/f1df2b3f570bb694d02ce7f0b6d1d45b836cd50942562e3901783994461bbb72 took 64ms and returned 200 3747 bytes
2020-08-06 00:45:35,410 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000026c|] 192.168.97.10 GET /api/v1/user/32944/avatar/8cac7d4c6070078be32305bd4337111d1c15c0b5a3151ba12d648ed207052957 took 66ms and returned 200 4744 bytes
2020-08-06 00:45:35,493 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [0000026e|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 54ms and returned 200 8744 bytes
2020-08-06 00:45:50,025 [ERROR] from org.thp.scalligraph.ErrorHandler in application-akka.actor.default-dispatcher-1952 [|] Internal error
akka.pattern.AskTimeoutException: Ask timed out on [Actor[akka://application/user/flowSingletonProxy#-984707864]] after [300000 ms]. Message of type [org.thp.thehive.services.FlowActor$FlowId]. A typical reason for `AskTimeoutException` is that the recipient actor didn't send a reply.
        at akka.pattern.PromiseActorRef$.$anonfun$defaultOnTimeout$1(AskSupport.scala:647)
        at akka.pattern.PromiseActorRef$.$anonfun$apply$1(AskSupport.scala:668)
        at akka.actor.Scheduler$$anon$7.run(Scheduler.scala:476)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.unbatchedExecute(SameThreadExecutionContext.scala:21)
        at akka.dispatch.BatchingExecutor.execute(BatchingExecutor.scala:126)
        at akka.dispatch.BatchingExecutor.execute$(BatchingExecutor.scala:117)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.execute(SameThreadExecutionContext.scala:20)
        at akka.actor.LightArrayRevolverScheduler$TaskHolder.executeTask(LightArrayRevolverScheduler.scala:358)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.executeBucket$1(LightArrayRevolverScheduler.scala:309)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.nextTick(LightArrayRevolverScheduler.scala:313)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.run(LightArrayRevolverScheduler.scala:265)
        at java.lang.Thread.run(Thread.java:748)
2020-08-06 00:45:50,025 [WARN] from org.thp.scalligraph.ErrorHandler in application-akka.actor.default-dispatcher-1952 [|] GET /api/flow?count=10&rootId=any returned 500
akka.pattern.AskTimeoutException: Ask timed out on [Actor[akka://application/user/flowSingletonProxy#-984707864]] after [300000 ms]. Message of type [org.thp.thehive.services.FlowActor$FlowId]. A typical reason for `AskTimeoutException` is that the recipient actor didn't send a reply.
        at akka.pattern.PromiseActorRef$.$anonfun$defaultOnTimeout$1(AskSupport.scala:647)
        at akka.pattern.PromiseActorRef$.$anonfun$apply$1(AskSupport.scala:668)
        at akka.actor.Scheduler$$anon$7.run(Scheduler.scala:476)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.unbatchedExecute(SameThreadExecutionContext.scala:21)
        at akka.dispatch.BatchingExecutor.execute(BatchingExecutor.scala:126)
        at akka.dispatch.BatchingExecutor.execute$(BatchingExecutor.scala:117)
        at akka.dispatch.internal.SameThreadExecutionContext$$anon$1.execute(SameThreadExecutionContext.scala:20)
        at akka.actor.LightArrayRevolverScheduler$TaskHolder.executeTask(LightArrayRevolverScheduler.scala:358)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.executeBucket$1(LightArrayRevolverScheduler.scala:309)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.nextTick(LightArrayRevolverScheduler.scala:313)
        at akka.actor.LightArrayRevolverScheduler$$anon$3.run(LightArrayRevolverScheduler.scala:265)
        at java.lang.Thread.run(Thread.java:748)
2020-08-06 00:45:51,130 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [0000026f|] 192.168.97.10 POST /api/v1/query?name=alert-count took 78ms and returned 200 2 bytes
2020-08-06 00:45:51,165 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [00000270|] 192.168.97.10 POST /api/v1/query?name=alerts took 101ms and returned 200
2020-08-06 00:45:51,187 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000271|] 192.168.97.10 POST /api/v1/query?name=alerts.count took 121ms and returned 200 1 bytes
2020-08-06 00:45:54,664 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000272|] 192.168.97.10 POST /api/v1/query?name=alerts took 43ms and returned 200
2020-08-06 00:45:54,669 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000273|] 192.168.97.10 POST /api/v1/query?name=alerts.count took 48ms and returned 200 2 bytes
2020-08-06 00:45:57,696 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000274|] 192.168.97.10 POST /api/v1/query?name=alerts took 31ms and returned 200
2020-08-06 00:45:58,852 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000275|] 192.168.97.10 POST /api/v1/query?name=alerts took 41ms and returned 200
2020-08-06 00:46:00,043 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000276|] 192.168.97.10 POST /api/v1/query?name=alerts took 36ms and returned 200
2020-08-06 00:46:00,988 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000277|] 192.168.97.10 POST /api/v1/query?name=alerts took 38ms and returned 200
2020-08-06 00:46:02,186 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000278|] 192.168.97.10 POST /api/v1/query?name=alerts took 35ms and returned 200
2020-08-06 00:46:03,485 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000279|] 192.168.97.10 POST /api/v1/query?name=alerts took 38ms and returned 200
2020-08-06 00:46:05,749 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000027a|] 192.168.97.10 POST /api/v1/query?name=mytasks took 74ms and returned 200
2020-08-06 00:46:06,034 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [0000027b|] 192.168.97.10 POST /api/v1/query?name=mytasks.count took 258ms and returned 200 2 bytes
2020-08-06 00:46:08,664 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000280|] 192.168.97.10 POST /api/v1/query?name=cases took 49ms and returned 200
2020-08-06 00:46:19,220 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000027e|] 192.168.97.10 POST /api/v1/query?name=case-count-stats took 10740ms and returned 200 4 bytes
2020-08-06 00:46:23,529 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000281|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:46:28,278 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [0000027f|] 192.168.97.10 POST /api/v1/query?name=cases.count took 19665ms and returned 200 3 bytes
2020-08-06 00:46:29,126 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000283|] 192.168.97.10 GET /api/v1/user/41048/avatar/3196c1194527c5efdc8b25246e3a20178fc8a97731518849cf35d4cd6626441c took 52ms and returned 200 8715 bytes
2020-08-06 00:46:29,229 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000284|] 192.168.97.10 GET /api/v1/user/4288/avatar/1e2953abf0302077d9de45a3681630766501d10326cc22386d3a854f7635556a took 54ms and returned 200 4838 bytes
2020-08-06 00:46:29,235 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000285|] 192.168.97.10 GET /api/v1/user/28864/avatar/64738ac16ebbb8d6825102e052c9be70cb5b3dfd07d342560793564448ac1d22 took 57ms and returned 200 5499 bytes
2020-08-06 00:46:29,348 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000286|] 192.168.97.10 GET /api/v1/user/8368/avatar/e7c508ef4bd058132efe8fe1a48df4c0322e231f0647faf28e9374907e1e0bff took 51ms and returned 200 6187 bytes
2020-08-06 00:46:29,362 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000287|] 192.168.97.10 GET /api/v1/user/12464/avatar/f1df2b3f570bb694d02ce7f0b6d1d45b836cd50942562e3901783994461bbb72 took 50ms and returned 200 3747 bytes
2020-08-06 00:46:29,443 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000288|] 192.168.97.10 GET /api/v1/user/57536/avatar/82b100ab52ca8435951011501c0ef0d49d1b8e5ae89b690a471e7c2377fde357 took 41ms and returned 200 8744 bytes
2020-08-06 00:46:32,853 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000289|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:46:34,924 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000026b|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60017ms and returned 200 2 bytes
2020-08-06 00:46:35,904 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000027d|] 192.168.97.10 POST /api/v1/query?name=case-status-stats took 27426ms and returned 200 48 bytes
2020-08-06 00:47:12,260 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000028b|] 192.168.97.10 GET /api/v1/user/current took 48ms and returned 200 658 bytes
2020-08-06 00:47:12,359 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000028c|] 192.168.97.10 GET /api/v1/user/current took 50ms and returned 200 658 bytes
2020-08-06 00:47:12,456 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000028d|] 192.168.97.10 POST /api/v1/query took 50ms and returned 200
2020-08-06 00:47:12,552 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000028e|] 192.168.97.10 GET /api/v1/user/current took 48ms and returned 200 658 bytes
2020-08-06 00:47:12,643 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000028f|] 192.168.97.10 POST /api/v1/query took 44ms and returned 200
2020-08-06 00:47:12,739 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000290|] 192.168.97.10 POST /api/stream took 31ms and returned 200 20 bytes
2020-08-06 00:47:12,751 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000291|] 192.168.97.10 POST /api/v0/query took 41ms and returned 200
2020-08-06 00:47:12,979 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000292|] 192.168.97.10 POST /api/v1/query?name=my-tasks.stats took 197ms and returned 200 1 bytes
2020-08-06 00:47:13,064 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000294|] 192.168.97.10 POST /api/v1/query?name=unread-alert-count took 43ms and returned 200 1 bytes
2020-08-06 00:47:13,141 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [00000295|] 192.168.97.10 GET /api/organisation took 36ms and returned 200 350 bytes
2020-08-06 00:47:13,379 [WARN] from org.thp.scalligraph.ErrorHandler in application-akka.actor.default-dispatcher-1973 [00000297|] GET /api/v1/user/[email protected] returned 404
org.thp.scalligraph.NotFoundError: User not found
        at org.thp.scalligraph.steps.StepsOps$TraversalOps.$anonfun$getOrFail$1(StepsOps.scala:384)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.steps.StepsOps$TraversalOps.getOrFail(StepsOps.scala:384)
        at org.thp.thehive.controllers.v1.UserCtrl.$anonfun$get$2(UserCtrl.scala:130)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$authRoTransaction$2(Entrypoint.scala:136)
        at org.thp.scalligraph.janus.JanusDatabase.roTransaction(JanusDatabase.scala:133)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$authRoTransaction$1(Entrypoint.scala:136)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$auth$1(Entrypoint.scala:86)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$asyncAuth$3(Entrypoint.scala:107)
        at org.scalactic.Good.fold(Or.scala:1229)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$asyncAuth$2(Entrypoint.scala:107)
        at org.thp.scalligraph.DiagnosticContext$.$anonfun$withRequest$2(ContextPropagatingDisptacher.scala:99)
        at org.thp.scalligraph.DiagnosticContext$.saveDiagnosticContext(ContextPropagatingDisptacher.scala:106)
        at org.thp.scalligraph.DiagnosticContext$.withRequest(ContextPropagatingDisptacher.scala:97)
        at org.thp.scalligraph.controllers.Entrypoint$EntryPointBuilder.$anonfun$asyncAuth$1(Entrypoint.scala:107)
        at org.thp.scalligraph.auth.HeaderAuthSrv$$anon$1.$anonfun$invokeBlock$3(HeaderAuthenticateSrv.scala:27)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.auth.HeaderAuthSrv$$anon$1.invokeBlock(HeaderAuthenticateSrv.scala:26)
        at org.thp.scalligraph.auth.HeaderAuthSrv$$anon$1.invokeBlock(HeaderAuthenticateSrv.scala:20)
        at org.thp.scalligraph.auth.BasicAuthSrv$$anon$1.$anonfun$invokeBlock$1(BasicAuthSrv.scala:52)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.auth.BasicAuthSrv$$anon$1.invokeBlock(BasicAuthSrv.scala:52)
        at org.thp.scalligraph.auth.BasicAuthSrv$$anon$1.invokeBlock(BasicAuthSrv.scala:50)
        at org.thp.scalligraph.auth.SessionAuthSrv$$anon$1.$anonfun$invokeBlock$1(SessionAuthSrv.scala:87)
        at scala.Option.fold(Option.scala:251)
        at org.thp.scalligraph.auth.SessionAuthSrv$$anon$1.invokeBlock(SessionAuthSrv.scala:87)
        at org.thp.scalligraph.auth.SessionAuthSrv$$anon$1.invokeBlock(SessionAuthSrv.scala:84)
        at play.api.mvc.ActionBuilder$$anon$10.$anonfun$invokeBlock$2(Action.scala:408)
        at play.api.mvc.ActionBuilderImpl.invokeBlock(Action.scala:441)
        at play.api.mvc.ActionBuilderImpl.invokeBlock(Action.scala:439)
        at play.api.mvc.ActionBuilder$$anon$10.invokeBlock(Action.scala:408)
        at play.api.mvc.ActionBuilder$$anon$10.invokeBlock(Action.scala:404)
        at play.api.mvc.ActionBuilder$$anon$9.apply(Action.scala:379)
        at play.api.mvc.Action.$anonfun$apply$4(Action.scala:82)
        at play.api.libs.streams.StrictAccumulator.$anonfun$mapFuture$4(Accumulator.scala:168)
        at scala.util.Try$.apply(Try.scala:213)
        at play.api.libs.streams.StrictAccumulator.$anonfun$mapFuture$3(Accumulator.scala:168)
        at scala.Function1.$anonfun$andThen$1(Function1.scala:57)
        at scala.Function1.$anonfun$andThen$1(Function1.scala:57)
        at play.api.libs.streams.StrictAccumulator.run(Accumulator.scala:199)
        at play.core.server.AkkaHttpServer.$anonfun$runAction$4(AkkaHttpServer.scala:416)
        at akka.http.scaladsl.util.FastFuture$.strictTransform$1(FastFuture.scala:41)
        at akka.http.scaladsl.util.FastFuture$.$anonfun$transformWith$3(FastFuture.scala:51)
        at scala.concurrent.impl.CallbackRunnable.run(Promise.scala:64)
        at org.thp.scalligraph.ContextPropagatingDisptacher$$anon$1.$anonfun$execute$2(ContextPropagatingDisptacher.scala:56)
        at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.java:23)
        at org.thp.scalligraph.DiagnosticContext$.$anonfun$withDiagnosticContext$2(ContextPropagatingDisptacher.scala:91)
        at org.thp.scalligraph.DiagnosticContext$.saveDiagnosticContext(ContextPropagatingDisptacher.scala:106)
        at org.thp.scalligraph.DiagnosticContext$.withDiagnosticContext(ContextPropagatingDisptacher.scala:89)
        at org.thp.scalligraph.DiagnosticContext$$anon$2.withContext(ContextPropagatingDisptacher.scala:74)
        at org.thp.scalligraph.ContextPropagatingDisptacher$$anon$1.$anonfun$execute$1(ContextPropagatingDisptacher.scala:56)
        at akka.dispatch.TaskInvocation.run(AbstractDispatcher.scala:48)
        at akka.dispatch.ForkJoinExecutorConfigurator$AkkaForkJoinTask.exec(ForkJoinExecutorConfigurator.scala:48)
        at java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:289)
        at java.util.concurrent.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1056)
        at java.util.concurrent.ForkJoinPool.runWorker(ForkJoinPool.java:1692)
        at java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:157)
2020-08-06 00:47:13,380 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000297|] 192.168.97.10 GET /api/v1/user/[email protected] took 29ms and returned 404 51 bytes
2020-08-06 00:47:13,702 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [00000293|] 192.168.97.10 POST /api/v1/query?name=waiting-tasks.stats took 903ms and returned 200 1 bytes
2020-08-06 00:47:16,913 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1954 [00000299|] 192.168.97.10 GET /api/organisation/admin took 51ms and returned 200 186 bytes
2020-08-06 00:47:16,915 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000029a|] 192.168.97.10 GET /api/config/organisation/ui.hideEmptyCaseButton took 52ms and returned 200 68 bytes
2020-08-06 00:47:16,919 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [00000298|] 192.168.97.10 POST /api/v0/query took 72ms and returned 200
2020-08-06 00:47:17,055 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [0000029b|] 192.168.97.10 POST /api/v1/query?name=organisation-users took 49ms and returned 200
2020-08-06 00:47:17,066 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1972 [0000029c|] 192.168.97.10 POST /api/v1/query?name=organisation-users.count took 58ms and returned 200 1 bytes
2020-08-06 00:47:23,540 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000029d|] 192.168.97.10 GET /api/status took 2ms and returned 200 275 bytes
2020-08-06 00:47:32,939 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1967 [0000029e|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes
2020-08-06 00:47:35,015 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [0000028a|] 192.168.97.10 GET /api/stream/sHkWU1FhYI0u6ZBhNdKM took 60019ms and returned 200 2 bytes
2020-08-06 00:48:12,720 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1951 [000002a0|] 192.168.97.10 GET /api/status took 5ms and returned 200 275 bytes
2020-08-06 00:48:13,204 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1953 [00000296|] 192.168.97.10 GET /api/stream/bayUM1q8DjeVcqrmptfW took 60019ms and returned 200 2 bytes
2020-08-06 00:48:23,652 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1973 [000002a2|] 192.168.97.10 GET /api/status took 3ms and returned 200 275 bytes
2020-08-06 00:48:32,938 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-1952 [000002a3|] 192.168.97.10 GET /api/status took 4ms and returned 200 275 bytes

Possible Solutions

I don't know
@crackytsi crackytsi added TheHive4 TheHive4 related issues bug labels Aug 6, 2020
@crackytsi crackytsi changed the title [Bug] TheHive 4.0 Slow response [Bug] TheHive 4.0 Slow response for some calls Aug 6, 2020
@mamoedo
Copy link

mamoedo commented Aug 6, 2020

Hi @crackytsi! I'm curious about how did you manage to migrate 9000 cases so fast. Did you change some special configuration?

I've been running the migration since 4.0.0 was released and "only" 800 cases and 30K alerts have been migrated so far (and every alert it's taking 20 seconds now)

@crackytsi
Copy link
Author

@mamoedo : No, its just the number of elements. It seems to get slow if you have a large number of objects. In my Demo-Data I just had 9000 Cases and 5000 Alerts. And my Cases have arround 15 Observables in average. I don't have a good clue. And my system should be quite strong. I can recommend to establish browser connection to TheHive as this costs a lot of additional performance.

@mamoedo mamoedo mentioned this issue Aug 10, 2020
Closed
@nicpenning
Copy link

We noticed that the analyzers take awhile to load on the observables page:

Request: _search?range=0-200&sort=-startDate

This takes about 20 seconds.

image

@crackytsi
Copy link
Author

@To-om can you take a look on this and maybe even fix this with 4.0.1?

@pemontto pemontto mentioned this issue Feb 24, 2021
Closed
@rriclet
Copy link
Contributor

rriclet commented Mar 19, 2021

This issue has been fixed with #1731, included in release 4.1.0.
Feel free to re-open this issue if you still notice slow performance.

@rriclet rriclet closed this as completed Mar 19, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@To-om To-om

Labels
bug scope:performance TheHive4 TheHive4 related issues
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
6 participants
@nadouani @nicpenning @rriclet @crackytsi @mamoedo @To-om