Turn Off the Cortex Integration

Turn off the Cortex integration if you don't use Cortex analyzers or responders.

Maintenance window required

This procedure involves changing configuration files and restarting services. Schedule a maintenance window to prevent service disruption.

Procedure

1. Stop TheHive service.

   Service commands

   Stop and restart commands depend on your installation method and the specific service. Refer to the official documentation for the appropriate commands.

   • Linux installation: Depending on your distribution and the service, use systemctl or service. See the systemctl documentation and the service documentation for details.
   • Docker Compose deployment: Refer to the official Docker Compose documentation.
   • Kubernetes deployment: Refer to the kubectl scale documentation or the kubectl rollout restart documentation.

2. Open the application.conf file using a text editor.

3. Uncomment the following line:

   scalligraph.disabledModules += org.thp.thehive.connector.cortex.CortexModule
   

4. Save your modifications in the application.conf file.

5. Restart TheHive service.

Next steps

• Perform Initial Login and Setup as an Admin