Skip to content

[Playbook] "Promote observable" component crashes #6399

Closed

Description

Description

When I use the "Promote observable to indicator" component, it crashes if I don't have a score on my observables.

Environment

OCTI 6.0.7

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Create the playbooks describe in the screenshot below
  2. Create a report
  3. Create an observable without score
  4. Add the observable to the report
  5. Add the label "test" to the report
  6. Wait the execution of the playbook and check the log of execution
    -> Error at the "promote observable" component

Additional information

When we try to create an indicator without a score (manually, in the GUI), the platform transparently sets 50. Perhaps this mechanism should be applied here too?

Screenshots

Playbooks

Screenshot 2024-03-20 170957

Screenshot 2024-03-20 171014

Screenshot 2024-03-20 171022

Screenshot 2024-03-20 171028

Error

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

Labels

buguse for describing something not working as expectedcriticaluse to identify critical bug to fix ASAPplaybookLinked to automation enginesolveduse to identify issue that has been solved (must be linked to the solving PR)

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions