Setting up TheHive and Cortex
The deployment design of TheHive provides companies with flexibility by allowing for both standalone server deployments (deployment on a single server) and clustered deployments (multiple servers work together to handle the TheHive application load). It is recommended to use cluster mode deployment for large production environments. Some of the software components of TheHive are as follows:
- Apache Cassandra: TheHive utilizes the Apache Cassandra database to store its data. Cassandra is a distributed NoSQL database known for its scalability and capability to manage massive amounts of data across a cluster of numerous nodes. Cassandra is utilized within the framework of TheHive to store data pertaining to cases, incidents, and other pertinent information.
- Elasticsearch: TheHive uses Elasticsearch for indexing. It is a powerful analytics and search engine that makes data indexing, querying, and searching more effective. It improves TheHive’...