Old non-existent analysers showing in Cortex after an upgrade

[daskydasky]

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	Debian
OS version (client)	Windows 10
Cortex version / git hash	3.0.0-1
Package Type	deb
Browser type & version	Chrome 77.0

Problem Description

Old non-existent analysers showing in Cortex after an upgrade.
I have upgraded TheHive / Cortex / Cortex Analysers and in Hive could not see any analysers.
Basically in Cortex on analysers tab still showing previously installed analysers.
Analysers catalogue is up to date.

Possible Solutions

As a workaround, I have created a new organization.

[RtKelleher]

I had opened a similar ticket awhile back.

I found by trial and error that you can remove the old analyzers in Elastic-search by deleting the first document referring to the analyzer (e.g. POST DELETE /Cortex_4/_doc/ or by query)

I'm unsure why they are not removed, but that was the only way I could get rid of the old analyzers.