<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Univers for KPMG";
panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi Sebastian,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I executed command as below as <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">1. sudo pip3 install elasticsearch >=7.0.0,<8.0<o:p></o:p></p>
<p class="MsoNormal"> -bash: 8.0: No such file or directory<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2. <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">root@new:/# pip3 install elasticsearch==7.12<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Requirement already satisfied: elasticsearch==7.12 in /usr/local/lib/python3.6/dist-packages<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Requirement already satisfied: urllib3<2,>=1.21.1 in /usr/lib/python3/dist-packages (from elasticsearch==7.12)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Requirement already satisfied: certifi in /usr/lib/python3/dist-packages (from elasticsearch==7.12)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:black">Regards,<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:black">Drupad Soni<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:black">KPMG – Cyber Security</span></b><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:#4D5156;background:white">Embassy Golf Links Business Park, Pebble Beach, 'B' Block,
<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:#4D5156;background:white">1st & 2nd Floor, Off Intermediate Ring Road</span><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:black">
<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:black">Mobile : +91 8140283894<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:black">Know more about our
<b>Cyber Security Services</b><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Univers for KPMG",sans-serif;color:#1F497D"><a href="https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html">https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html</a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Sebastian Wagner <wagner@cert.at> <br>
<b>Sent:</b> Tuesday, March 30, 2021 6:36 PM<br>
<b>To:</b> Soni, Drupad <drupadsoni@kpmg.com>; intelmq-users@lists.cert.at<br>
<b>Cc:</b> Shah, Kunal <kunalshah3@kpmg.com>; Gupta, Anshul <anshulgupta9@kpmg.com>; Thakur, Richu <richuthakur@kpmg.com><br>
<b>Subject:</b> Re: [IntelMQ-users] Elasticsearch BOT error<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Hi,<o:p></o:p></p>
<p>So your previously problems are solved?<o:p></o:p></p>
<p>The elasticsearch library is not installed. Run `sudo pip3 install elasticsearch>=7.0.0,<8.0.0`.<o:p></o:p></p>
<p>I just discovered that the shown error message is wrong. Not >=5.0.0,<6.0.0 is required, but >=7.0.0,<8.0.0. I already fixed that in the repository, will be part of the next maintenance release.<o:p></o:p></p>
<p>Sebastian<o:p></o:p></p>
<div>
<p class="MsoNormal">On 3/30/21 2:16 PM, Soni, Drupad via IntelMQ-users wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Hi Team,<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">We have integrated output for elastic search which resulting into error as below. We have installed Intelmq: 2.3.1 and Elasticsearch, Kibana: 7.12. As per suggestion from your team latest version of Elasticsearch and kibana works perfectly
well with Intelmq latest version. <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333;background:white">Bot initialization failed.</span><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><br>
<span style="background:white">Traceback (most recent call last):</span><br>
<span style="background:white"> File "/usr/lib/python3/dist-packages/intelmq/lib/bot.py", line 164, in __init__</span><br>
<span style="background:white"> self.init()</span><br>
<span style="background:white"> File "/usr/lib/python3/dist-packages/intelmq/bots/outputs/elasticsearch/output.py", line 58, in init</span><br>
<span style="background:white"> raise MissingDependencyError('elasticsearch', version='>=5.0.0,<6.0.0')</span><br>
<span style="background:white">intelmq.lib.exceptions.MissingDependencyError: Could not load dependency 'elasticsearch', please install it with apt/yum/dnf/zypper (possibly named python3-elasticsearch) or pip3. Please note that this bot requires elasticsearch version >=5.0.0,<6.0.0!</span></span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Regards,</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Drupad Soni</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt">KPMG – Cyber Security</span></b><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Embassy Golf Links Business Park, Pebble Beach, 'B' Block,
</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">1st & 2nd Floor, Off Intermediate Ring Road
</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Mobile : +91 8140283894</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt">Know more about our
<b>Cyber Security Services</b></span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-GB" style="font-size:10.0pt"><a href="https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html">https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html</a></span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" align="center">
</div>
<p class="MsoNormal">KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).<br>
<br>
*******************************************************************************************************<br>
DISCLAIMER<br>
The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading
"Received in error," send to <a href="mailto:postmaster1@kpmg.com">postmaster1@kpmg.com</a>, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to
be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in
this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.<br>
<br>
KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.<br>
<br>
KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG
International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such.<br>
<br>
“Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any
other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and
subject to the terms and conditions on which such consent has been granted”<br>
*******************************************************************************************************<br>
<br>
<br>
<o:p></o:p></p>
</blockquote>
<pre>-- <o:p></o:p></pre>
<pre>// Sebastian Wagner <a href="mailto:wagner@cert.at"><wagner@cert.at></a> - T: +43 1 5056416 7201<o:p></o:p></pre>
<pre>// CERT Austria - <a href="https://www.cert.at/">https://www.cert.at/</a><o:p></o:p></pre>
<pre>// Eine Initiative der nic.at GmbH - <a href="https://www.nic.at/">https://www.nic.at/</a><o:p></o:p></pre>
<pre>// Firmenbuchnummer 172568b, LG Salzburg<o:p></o:p></pre>
</div>
</body>
</html>