SinkDB analyzer could not find DIG in the Cortex docker image

[ParanoidRat]

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	n/a
OS version (client)	n/a
Cortex version / git hash	thehiveproject/cortex:2.1.2-1
Package Type	Docker (Swarm)

Problem Description

SinkDB uses dig to query data (see line 20 in sinkdb.py). When SinkDB analyzer is used in Cortex docker container it returns the following error

Invalid output Traceback (most recent call last): File "SinkDB/sinkdb.py", line 52, in <module> SinkDBAnalyzer().run() File "SinkDB/sinkdb.py", line 36, in run "is_sinkhole": self.dig(self.data) File "SinkDB/sinkdb.py", line 22, in dig stderr=subprocess.PIPE) File "/usr/lib/python2.7/subprocess.py", line 394, in __init__ errread, errwrite) File "/usr/lib/python2.7/subprocess.py", line 1047, in _execute_child raise child_exception OSError: [Errno 2] No such file or directory 

Steps to Reproduce

1. Deploy Cortex as a docker container or Swarm service
2. Supply latest analyzers as a docker volume
3. Use SinkDB analyzer

Possible Solutions

Provide dig as part of Cortex docker image placed in the standard PATH