[Bug] Elasticsearch analyzer "keys" field is required but should not be #1291
Description
Describe the bug
The description of the analyzer says that the "keys" param is not required. However, leaving it empty when running the analyzer with a local config files generates an error.
To Reproduce
- create a local input.json file without a "keys" field
- run the analyzer with the local input.json
- you get a "cannot iterate on None type" error
Expected behavior
The missing "keys" param should not generate an error.
Complementary information
The issue comes from the "zip" function call on index,keys,users, and passwords.
Work environment
- Cortex Analyzer/Responder name: ElasticSearch
- Cortex Analyzer/Responder version: 1.0