[backend] inferred data always have the Rule Manager's confidence (#6093

)
OpenCTI-Platform · Feb 23, 2024 · b03e0b0 · b03e0b0
1 parent 7a75b3a
commit b03e0b0
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/opencti-platform/opencti-graphql/src/database/middleware.js b/opencti-platform/opencti-graphql/src/database/middleware.js
@@ -2044,6 +2044,9 @@ const createRuleDataPatch = (instance) => {
   if (isBasicRelationship(instance.entity_type)) {
     patch.i_inference_weight = weight;
   }
+  // patch confidence is the Rule Manager's confidence
+  patch.confidence = RULE_MANAGER_USER.effective_confidence_level.max_confidence;
+
   // list supported attributes [{name: string, operation: string}] by entity type
   const supportedAttributes = RULES_ATTRIBUTES_BEHAVIOR.supportedAttributes(instance.entity_type);
   for (let index = 0; index < supportedAttributes.length; index += 1) {

diff --git a/opencti-platform/opencti-graphql/src/rules/rules-utils.js b/opencti-platform/opencti-graphql/src/rules/rules-utils.js
@@ -16,7 +16,6 @@ export const RULES_ATTRIBUTES_BEHAVIOR = {
       return [
         { name: 'first_seen', operation: 'MIN' },
         { name: 'last_seen', operation: 'MAX' },
-        { name: 'confidence', operation: 'AVG' },
         { name: 'attribute_count', operation: 'SUM' },
         { name: 'objectMarking', operation: 'AGG' },
       ];
@@ -25,15 +24,13 @@ export const RULES_ATTRIBUTES_BEHAVIOR = {
       return [
         { name: 'start_time', operation: 'MIN' },
         { name: 'stop_time', operation: 'MAX' },
-        { name: 'confidence', operation: 'AVG' },
         { name: 'objectMarking', operation: 'AGG' },
       ];
     }
     if (entityType === ENTITY_TYPE_INCIDENT) { // RuleSightingIncident
       return [
         { name: 'first_seen', operation: 'MIN' },
         { name: 'last_seen', operation: 'MAX' },
-        { name: 'confidence', operation: 'AVG' },
         { name: 'objectMarking', operation: 'AGG' },
       ];
     }