07-28-2020 08:06 AM
I've just followed the instructions (https://live.paloaltonetworks.com/t5/minemeld-articles/manually-install-minemeld-on-ubuntu-16-04/ta-...) for setting up a fresh install of MineMeld on Ubuntu 16.04 LTS (on Azure, in this case). Followed every single step, including the reboot at the end. All of the services show as being in a RUNNING state.
But, when I go to the web page and try to login with the default creds (admin:minemeld) it throws a red error box in the upper-right of the window that says "ERROR CHECKING CREDENTIALS: Timeout".
I've previously tried updating an existing install (59post1) and installing using ansible, both methods also had the same result. Everything about the update/install appears to work properly, and all the services show as running, but I can't get logged into the UI.
I've been using MineMeld for a couple of years, but the initial install has always been a you-could-sleep-through-it level of easy in the past. This is the first time I've encountered a straight-out-of-the-box error that wasn't because I made a bad prototype. And I really need to get the updated version working (I've been on 59post1) because I need to add the extension for the NG Miner for TAXII feeds (my most important source needs that)... Any help would be greatly appreciated.
From the web.log
:~$ tail -n 50 /opt/minemeld/log/minemeld-web.log [2020-07-28 14:51:23 UTC] [1984] [DEBUG] redis session connection pool: in use: 0 available: 1
[2020-07-28 14:51:23 UTC] [1984] [DEBUG] RPC sent to @mbus:master:rpc for method status
127.0.0.1 - - [28/Jul/2020:14:51:23 +0000] "GET /feeds/blacklist_domain HTTP/1.0" 404 38 "-" "-"
[2020-07-28 14:51:24 UTC] [1984] [DEBUG] redis session connection pool: in use: 0 available: 1
[2020-07-28 14:51:24 UTC] [1984] [DEBUG] RPC sent to @mbus:master:rpc for method status
127.0.0.1 - - [28/Jul/2020:14:51:24 +0000] "GET /feeds/blacklist_domain HTTP/1.0" 404 38 "-" "-"
[2020-07-28 14:51:25 UTC] [1984] [DEBUG] redis session connection pool: in use: 0 available: 1
[2020-07-28 14:51:25 UTC] [1984] [DEBUG] RPC sent to @mbus:master:rpc for method status
127.0.0.1 - - [28/Jul/2020:14:51:25 +0000] "GET /feeds/blacklist_domain HTTP/1.0" 404 38 "-" "-"
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:51:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:52:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:53:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:28 UTC] [1984] [DEBUG] redis session connection pool: in use: 0 available: 1
[2020-07-28 14:54:28 UTC] [1984] [DEBUG] RPC sent to @mbus:master:rpc for method status
127.0.0.1 - - [28/Jul/2020:14:54:28 +0000] "GET /feeds/blacklist_domain HTTP/1.0" 404 38 "-" "-"
[2020-07-28 14:54:29 UTC] [1984] [DEBUG] redis session connection pool: in use: 0 available: 1
[2020-07-28 14:54:29 UTC] [1984] [DEBUG] RPC sent to @mbus:master:rpc for method status
127.0.0.1 - - [28/Jul/2020:14:54:29 +0000] "GET /feeds/blacklist_domain HTTP/1.0" 404 38 "-" "-"
[2020-07-28 14:54:30 UTC] [1984] [DEBUG] redis session connection pool: in use: 0 available: 1
[2020-07-28 14:54:30 UTC] [1984] [DEBUG] RPC sent to @mbus:master:rpc for method status
127.0.0.1 - - [28/Jul/2020:14:54:30 +0000] "GET /feeds/blacklist_domain HTTP/1.0" 404 38 "-" "-"
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
[2020-07-28 14:54:40 UTC] [1984] [INFO] no receivers
And the engine.log
:~$ tail -n 50 /opt/minemeld/log/minemeld-engine.log
2020-07-28T14:44:38 (2019)basepoller._polling_loop INFO: Polling dshield_blocklist
2020-07-28T14:44:38 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595947478747 sudden_death
2020-07-28T14:44:38 (2019)table._query_by_index INFO: Deleted in scan of _last_run: 20
2020-07-28T14:44:38 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595947478747 age_out
2020-07-28T14:44:38 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:44:38 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595947478747 gc
2020-07-28T14:44:38 (2019)table._query_by_index INFO: Deleted in scan of _withdrawn: 0
2020-07-28T14:44:55 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947495798 age_out
2020-07-28T14:44:55 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:46:02 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947562802 age_out
2020-07-28T14:46:02 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:47:09 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947629803 age_out
2020-07-28T14:47:09 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:47:30 (2019)basepoller._actor_loop INFO: spamhaus_EDROP - command: 1595947650744 age_out
2020-07-28T14:47:30 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:47:30 (2019)basepoller._actor_loop INFO: spamhaus_DROP - command: 1595947650748 age_out
2020-07-28T14:47:30 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:47:55 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595947675743 age_out
2020-07-28T14:47:55 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:48:16 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947696803 age_out
2020-07-28T14:48:16 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:49:23 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947763807 age_out
2020-07-28T14:49:23 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:50:30 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947830809 age_out
2020-07-28T14:50:30 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:51:37 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947897811 age_out
2020-07-28T14:51:37 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:52:12 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595947932744 age_out
2020-07-28T14:52:12 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:52:44 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595947964812 age_out
2020-07-28T14:52:44 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:53:51 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595948031815 age_out
2020-07-28T14:53:51 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:54:57 (2019)basepoller._huppable_wait INFO: hup is clear: False
2020-07-28T14:54:57 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595948097748 poll
2020-07-28T14:54:57 (2019)basepoller._polling_loop INFO: Polling dshield_blocklist
2020-07-28T14:54:58 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595948097748 sudden_death
2020-07-28T14:54:58 (2019)table._query_by_index INFO: Deleted in scan of _last_run: 20
2020-07-28T14:54:58 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595948097748 age_out
2020-07-28T14:54:58 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:54:58 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595948097748 gc
2020-07-28T14:54:58 (2019)table._query_by_index INFO: Deleted in scan of _withdrawn: 0
2020-07-28T14:54:58 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595948098817 age_out
2020-07-28T14:54:58 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:56:05 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595948165818 age_out
2020-07-28T14:56:05 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:56:29 (2019)basepoller._actor_loop INFO: dshield_blocklist - command: 1595948189744 age_out
2020-07-28T14:56:29 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
2020-07-28T14:57:12 (2019)basepoller._actor_loop INFO: wlWhiteListIPv4 - command: 1595948232820 age_out
2020-07-28T14:57:12 (2019)table._query_by_index INFO: Deleted in scan of _age_out: 0
07-28-2020 11:32 AM
It appears my impatience was getting the best of me. I'd gone through the whole process several times (so much that I went ahead and now have a nice ARM template for deploying the Ubuntu server & scripting out the initial MM setup).
Then I walked away for some lunch, and when I came back it let me login. I'd waited before, but never more than 10-15 minutes. I left it running in the "broken" state for at least 45 minutes while having lunch before I came back and it was letting me in.
Again, all the services showed as being in the running state. It just seems that they needed to be running "for a little bit" before I could first login.
So if anyone else is having a similar issue -- don't forget to "just let it sit" for a bit after that reboot before you get too carried away trying to fix a problem.
07-28-2020 11:32 AM
It appears my impatience was getting the best of me. I'd gone through the whole process several times (so much that I went ahead and now have a nice ARM template for deploying the Ubuntu server & scripting out the initial MM setup).
Then I walked away for some lunch, and when I came back it let me login. I'd waited before, but never more than 10-15 minutes. I left it running in the "broken" state for at least 45 minutes while having lunch before I came back and it was letting me in.
Again, all the services showed as being in the running state. It just seems that they needed to be running "for a little bit" before I could first login.
So if anyone else is having a similar issue -- don't forget to "just let it sit" for a bit after that reboot before you get too carried away trying to fix a problem.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
