play.http.secret.

key="t5EeDXh2dEtJxohh"

# JanusGraph
db {
provider: janusgraph
janusgraph {
storage {
backend: cql
hostname: ["cassandra"]

cql {
cluster-name: thp # cluster name
keyspace: thehive # name of the keyspace
read-consistency-level: ONE
write-consistency-level: ONE
}
}

## Index configuration
index {
search {
backend: lucene
directory: /opt/index
}
}
}
}

storage {
provider: localfs
localfs.location: /opt/data
}

play.http.parser.maxDiskBuffer: 50MB

play.modules.enabled += org.thp.thehive.connector.cortex.CortexModule
cortex {
servers = [
{
name = local
url = "http://cortex:9001"
auth {
type = "bearer"
key = "XXXXXXXXXXXXXXx"
}
# HTTP client configuration (SSL and proxy)
# wsConfig {}
# List TheHive organisation which can use this Cortex server. All ("*") by
default
# includedTheHiveOrganisations = ["*"]
# List TheHive organisation which cannot use this Cortex server. None by
default
# excludedTheHiveOrganisations = []
}
]
# Check job update time intervalcortex
refreshDelay = 5 seconds
# Maximum number of successive errors before give up
maxRetryOnError = 3
 # Check remote Cortex status time interval
statusCheckInterval = 1 minute
}
# MISP configuration
play.modules.enabled += org.thp.thehive.connector.misp.MispModule
misp {
interval: 5 min
servers: [
{
name = "MISP THP" # MISP name
url = "https://misp/" # URL or MISP
auth {
type = key
key = "XXXXXXXXXXXXXXx" # MISP API key
}
wsConfig { ssl { loose { acceptAnyCertificate: true } } }
}
]
}

notification.webhook.endpoints = [
{
name: local
url: "http://thehive:5000/"
version: 0
wsConfig: {}
auth: {type:"none"}
includedTheHiveOrganisations: []
excludedTheHiveOrganisations: []
}
]