-
Notifications
You must be signed in to change notification settings - Fork 915
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Having Network Traffic observable with a dst ref makes the observable listing crash #6070
Comments
cc @SouadHadjiat I think you already made the root cause analysis for this one |
"failures":[{"index":"opencti_stix_cyber_observables-000001","node":"Ze8cuEaJT9Gd0Z1ilSybPA","reason":{"caused_by":{"reason":"No field found for [dst_port.keyword] in mapping","type":"illegal_argument_exception"}
|
Actually the bug happens only when we sort on "representative" and if we have at least one network traffic with "dst_port", it doesn't have any link to dst_ref |
Description
Discovered while working on #6056
If a Network Traffic observable has a
dst
ref set, the pagination request in the observable list crashes.=> Update : the bug happens is a network traffic has "dst_port" and we try to sort the observable list by "representative".
Environment
latest 5.12
Reproducible Steps
Expected Output
no crash :)
Actual Output
crash :(
The text was updated successfully, but these errors were encountered: