{"id":2888,"date":"2025-10-04T12:16:36","date_gmt":"2025-08-28T08:11:46","guid":{"rendered":""},"modified":"2025-02-02T00:46:19","modified_gmt":"2025-02-01T23:46:19","slug":"how-to-install-cortex-observable-analysis-tool-on-ubuntu-22-04","status":"publish","type":"post","link":"https:\/\/netcloud24.com\/knowledgebase\/how-to-install-cortex-observable-analysis-tool-on-ubuntu-22-04\/","title":{"rendered":"Linux VPS & VPS Windows Setup Guide | NetCloud24 Cortex Observable Analysis Tool on Ubuntu 22.04"},"content":{"rendered":"

\u00a0<\/p>\n<\/p>\n

\n

\u00a0<\/h1>\n<\/header>\n
\n

Cortex is a powerful open-source observable analysis tool that is used for cyber threat intelligence and incident response workflows. In this guide, we will walk through the steps to install Cortex on Ubuntu 22.04. Whether you\u2019re using a local machine or deploying Cortex on a , this guide will help you get started.<\/p>\n

\n

Step 1: Update Your System<\/h2>\n

Before installing Cortex, ensure your system is up-to-date. Run the following commands to update your Ubuntu 22.04 system:<\/p>\n

sudo apt update && sudo apt upgrade<\/code><\/pre>\n
Keeping your system updated ensures the latest security patches and software updates. This is essential whether you\u2019re hosting locally or on a UK Windows VPS<\/a>.<\/p>\n<\/section>\n
\n
Step 2: Install Java<\/h2>\n
Cortex requires Java to run. Install OpenJDK 11, the recommended version for Cortex, using the following command:<\/p>\n
sudo apt install openjdk-11-jdk<\/code><\/pre>\n
After installation, verify that Java is installed:<\/p>\n
java -version<\/code><\/pre>\n
The output should show OpenJDK 11 installed. Java is critical for running Cortex, whether hosted on Ubuntu or on a VPS Windows VPS Servers<\/a> setup.<\/p>\n<\/section>\n
\n
Step 3: Install Elasticsearch<\/h2>\n
Cortex uses Elasticsearch as its database. To install Elasticsearch, first download and install its GPG key:<\/p>\n
\r\nwget -qO - https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch | sudo apt-key add -\r\n            <\/code><\/pre>\n
Add the Elasticsearch repository:<\/p>\n
\r\nsudo sh -c 'echo \"deb https:\/\/artifacts.elastic.co\/packages\/7.x\/apt stable main\" > \/etc\/apt\/sources.list.d\/elastic-7.x.list'\r\nsudo apt update\r\n            <\/code><\/pre>\n
Now, install Elasticsearch:<\/p>\n
sudo apt install elasticsearch<\/code><\/pre>\n
Once installed, start Elasticsearch and enable it to start on boot:<\/p>\n
\r\nsudo systemctl start elasticsearch\r\nsudo systemctl enable elasticsearch\r\n            <\/code><\/pre>\n
This database will store Cortex’s analysis data, whether you\u2019re running on a local server or on a Windows VPSVirtual Private Server hosting<\/a>.<\/p>\n<\/section>\n
\n
Step 4: Download and Install Cortex<\/h2>\n
Now that Java and Elasticsearch are installed, download the latest version of Cortex:<\/p>\n
\r\ncd \/opt\r\nsudo wget https:\/\/download.thehive-project.org\/cortex-3.1.1-1.zip\r\nsudo unzip cortex-3.1.1-1.zip\r\nsudo mv cortex-3.1.1 \/opt\/cortex\r\n            <\/code><\/pre>\n
Set the correct ownership for the Cortex directory:<\/p>\n
sudo chown -R cortex:cortex \/opt\/cortex<\/code><\/pre>\n<\/section>\n
\n
Step 5: Configure Cortex<\/h2>\n
Next, you need to configure Cortex to communicate with Elasticsearch and set other application settings. Start by copying the default configuration file:<\/p>\n
sudo cp \/opt\/cortex\/application.conf.example \/opt\/cortex\/application.conf<\/code><\/pre>\n
Edit the configuration file to set your database details and customize the application:<\/p>\n
sudo nano \/opt\/cortex\/application.conf<\/code><\/pre>\n
Set the Elasticsearch URL and other essential details like so:<\/p>\n
\r\n# Elasticsearch configuration\r\nsearch {\r\n  index = cortex\r\n  host = [\"http:\/\/127.0.0.1:9200\"]\r\n}\r\n            <\/code><\/pre>\n
Once done, save the file and exit.<\/p>\n<\/section>\n
\n
Step 6: Run Cortex<\/h2>\n
To start Cortex, run the following command:<\/p>\n
sudo \/opt\/cortex\/bin\/cortex<\/code><\/pre>\n
Cortex will start running, and you can access it via http:\/\/your-server-ip:9001<\/code>. This interface allows you to manage observable analysis, whether you\u2019re using a local server or a UK VPS Windows<\/a> hosting platform.<\/p>\n<\/section>\n
\n
Step 7: Configure Cortex as a Service<\/h2>\n
To ensure that Cortex starts automatically on boot, you can set it up as a systemd service. Create a service file:<\/p>\n
sudo nano \/etc\/systemd\/system\/cortex.service<\/code><\/pre>\n
Add the following content to the file:<\/p>\n
\r\n[Unit]\r\nDescription=Cortex Service\r\nAfter=network.target\r\n\r\n[Service]\r\nExecStart=\/opt\/cortex\/bin\/cortex\r\nUser=cortex\r\nRestart=always\r\n\r\n[Install]\r\nWantedBy=multi-user.target\r\n            <\/code><\/pre>\n
Save the file, reload systemd, and enable the service:<\/p>\n
\r\nsudo systemctl daemon-reload\r\nsudo systemctl enable cortex\r\nsudo systemctl start cortex\r\n            <\/code><\/pre>\n
Cortex will now automatically start on system boot, making it ideal for monitoring and observable analysis in production environments like Windows VPS hosting UK<\/a>.<\/p>\n<\/section>\n