Comments (6)
I have not been able to reproduce. Do you currently have any tickets created or is this the first time attempting to navigate to the tickets view? Also did you install via the provided MSI package or your own build...I see a reference to C:\Users\eerickson\Downloads\falcon-orchestrator-1.0.0\falcon-orchestrator-1.0.0\FalconOrchestrator.Web\Repository\TicketingRepository.cs:7
which leads me to believe you compiled yourself?
from falcon-orchestrator.
Evan,
It is basically the first time navigating to the tickets. Don't know if it is relevant, but clicking on Indicators returns an (400) Bad Request.
I did recompile the msi because it failed repeatedly to create the database so I modified that portion to "Continue on Error =yes" in the database.wxs and manually created the database and tables using the scripts. I did verify the requirements (roles, etc) and matched the OS (2012 R2) and SQL version (2014) to what you specified in the Install documentation.
Outside of that, the only differences in the recompile would be the versions of MVC and .Net components (Razor, Web.Infrastructure, etc) Shown below.
To be completely honest, I am NOT a developer so it is completely possible and probably likely I have messed this up severly in the recompile; however, it seems only the two functions listed are not working so its almost functional.
From a holistic perspective, not sure why I couldn't get the database installation to work. Tried using my account which has DA rights and a local account with admin rights on the server. Doing a SQL trace during install never showed anything touching the SQL server. Which led to modifying the MSI as described above.
By the way, I think Brent has setup a call on Thursday with you around this. I don't want to waste a bunch of your time but we have a small Infosec team and the Orchestrator functionality will be very helpful to them on a daily basis otherwise I would have given up a long time ago. ;-)
Regards,Eric
from falcon-orchestrator.
Hey Eric, glad the project can be useful to your team! I'm happy to help you get it deployed. I recently came across this and still need to update the documentation...when installing you need to use a local sql account and not a windows account otherwise the install won't complete properly. This is likely the cause of your installation issues with the MSI. For installation purposes you can use the sql SA account and change it afterwards or just create a new account within SSMS with adequate permissions.
On our call Thursday, I suggest we walk through re-installing with this in mind. I suspect this will resolve the issue you're seeing within the ticketing module. I'm going to close this ticket and we can troubleshoot further Thursday. Cheers!
from falcon-orchestrator.
Evan,
I was able to successfully install Orchestrator on a new production box using the information you provided. Thank you very much. The only issue I have (outside of the known 400 error in Indications) is getting the dashboard and Detections to populate. I have double verified I save both API keys but won't seem to pull data.
If I can get this resolved, I would say there is no need for the call scheduled tomorrow. ;-)
Eric
from falcon-orchestrator.
Eric, have you started the Falcon Orchestrator Windows service (https://github.com/CrowdStrike/falcon-orchestrator/wiki/Installation-&-Deployment#starting-the-service)? If so, are you seeing any errors in the RunLog? There's a section right underneath in the Wiki which provides some basic troubleshooting. Please start the service and send any errors you're seeing. Also to see new detections coming into Orchestrator, make sure you use the refresh button on the top right in the navigation bar.
from falcon-orchestrator.
Per our conversation, generating a new API key seems to be the resolution. Thanks again for your time and efforts.
from falcon-orchestrator.
Related Issues (20)
- Falcon Orchestrator Client Service - Dying after startup HOT 7
- Orchestrator never installs without db error properly HOT 2
- Falcon Orchestrator Client keeps crashing HOT 1
- Error while authenticating to API HOT 13
- Unable to access configuration page: Padding is invalid and cannot be removed. HOT 7
- email alert delivery time does not match start time of detections HOT 5
- Issue connecting to the database HOT 3
- Adding an existing DB field to Detection Notification Email HOT 5
- Orchestrator not communicating with Crowdstrike HOT 8
- Network error: Named Pipes Provider, error:40 HOT 2
- CrowdStrike Orchestrator Configuration HOT 8
- Malformed audit event timestamp, failing over to current time HOT 1
- Update wiki to include Ticketing documentation HOT 1
- Email notifications do not show detection 'End Time' HOT 2
- New Events does not show in Falcon-Orchestrator HOT 2
- Error! Exception calling "GetOwner" : "Not found " HOT 1
- how to troubleshoot falcon ochestrator installation HOT 2
- Configuring CS-Orchestrator Alerts HOT 2
- System.Security.Cryptography.CryptographicException Error occured HOT 1
- Call to get access token returned empty token without an error' HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from falcon-orchestrator.