Skip to content

Analyzer: yetiindicators.py: raise RuntimeError("YETI_API_ROOT is not configured.") #3635

@jaegeral

Description

@jaegeral

Running the yeti analyzer on a fresh system gives:

[2025-12-16 13:32:49,896] celery.app.trace/ERROR Task timesketch.lib.tasks.run_sketch_analyzer[0613d97e-49ba-4be0-b8b1-081d5a569666] raised unexpected: RuntimeError('YETI_API_ROOT is not configured.')
Traceback (most recent call last):
  File "/opt/venv/lib/python3.12/site-packages/celery/app/trace.py", line 453, in trace_task
    R = retval = fun(*args, **kwargs)
                 ^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/src/timesketch/timesketch/app.py", line 269, in __call__
    return TaskBase.__call__(self, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/venv/lib/python3.12/site-packages/celery/app/trace.py", line 736, in __protected_call__
    return self.run(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/src/timesketch/timesketch/lib/tasks.py", line 722, in run_sketch_analyzer
    analyzer = analyzer_class(
               ^^^^^^^^^^^^^^^
  File "/usr/local/src/timesketch/timesketch/lib/analyzers/yetiindicators.py", line 100, in __init__
    raise RuntimeError("YETI_API_ROOT is not configured.")
RuntimeError: YETI_API_ROOT is not configured.

Which ends in a ever pending celery job.

Instead it should error out and set the job to ERROR.

    Updated At
76 yetiinvestigations   2           PENDING Waiting/Lost (Not in active/reserved) 2025-12-16 13:16:14.704724 2025-12-16 13:16:14.728472
72 yetibloomchecker     2           PENDING Waiting/Lost (Not in active/reserved) 2025-12-16 13:16:13.685269 2025-12-16 13:16:13.712925
74 yetitriageindicators 2           PENDING Waiting/Lost (Not in active/reserved) 2025-12-16 13:16:14.093186 2025-12-16 13:16:14.1236

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions