cisagov Malcolm Troubleshooting Discussions
Troubleshooting Discussions
-
You must be logged in to vote Proxmox giving odd address to Malcolm/Hedgehog
isorelating to the ISO-installed environment for Malcolm and/or Hedgehog -
You must be logged in to vote PCAP uploaded and processed, but no data in dashboards
uploadRelating to PCAP and/or Zeek log ingestion -
You must be logged in to vote Can't download hedgehog ISO
releaseRelated to creation/packaging of Malcolm releases isorelating to the ISO-installed environment for Malcolm and/or Hedgehog -
You must be logged in to vote Monitor interface not picking up
captureRelating to pcap-capture container isorelating to the ISO-installed environment for Malcolm and/or Hedgehog -
You must be logged in to vote -
You must be logged in to vote Bootable USB Errors during Installation
isorelating to the ISO-installed environment for Malcolm and/or Hedgehog -
You must be logged in to vote Help: I can’t load Threat Intelligence via misp.yaml in Malcolm
intelRelated to integration with threat intel feeds -
You must be logged in to vote Hedgehog & Malcolm Communication is not happening
sensorFor issues dealing with the Hedgehog OS capture sensor -
You must be logged in to vote Zeek container startup is slow when using HDD and non-default UID/GID
zeekRelating to Malcolm's use of Zeek dockerRelating to docker and docker-compose as used by Malcolm performanceRelated to speed/performance -
You must be logged in to vote Error starting graphical display with ISO-installed Malcolm on Gen 1 Hyper-V
isorelating to the ISO-installed environment for Malcolm and/or Hedgehog -
You must be logged in to vote Opensearch backup for migration to Remote Opensearch Cluster
opensearchRelating to Malcolm's use of OpenSearch performanceRelated to speed/performance -
You must be logged in to vote Zeek Intel Framework - TAXII autogen failing
intelRelated to integration with threat intel feeds -
You must be logged in to vote Running MALCOM with collection in containerized install
captureRelating to pcap-capture container -
You must be logged in to vote PCAP Files Filling up HardDrive
captureRelating to pcap-capture container arkimeRelating to Malcolm's use of Arkime -
You must be logged in to vote Logstash SSL Error
logstashRelating to Malcolm's use of Logstash sensorFor issues dealing with the Hedgehog OS capture sensor -
You must be logged in to vote NGINX Issue after updating from 25.03.1 -> 25.05.0
arkimeRelating to Malcolm's use of Arkime upgradeRelated to the Malcolm/Hedgehog upgrade process -
You must be logged in to vote Logstash zeek event failure
zeekRelating to Malcolm's use of Zeek logstashRelating to Malcolm's use of Logstash sensorFor issues dealing with the Hedgehog OS capture sensor -
You must be logged in to vote -
You must be logged in to vote Missing Fields
elasticRelated to issue with external ElasticSearch/Kibana output -
You must be logged in to vote PCAP Files keep filling up Hard Drive
bugSomething isn't working arkimeRelating to Malcolm's use of Arkime opensearchRelating to Malcolm's use of OpenSearch -
You must be logged in to vote Unexpected behavior indexes
elasticRelated to issue with external ElasticSearch/Kibana output -
You must be logged in to vote After restarting Malcolm, zeek did not start
zeekRelating to Malcolm's use of Zeek -
You must be logged in to vote -
You must be logged in to vote Arkime exporting 0 byte PCAP
arkimeRelating to Malcolm's use of Arkime -
You must be logged in to vote netbox not starting
netboxRelated to Malcolm's use of NetBox
