Skip to content

Multiple responder actions does not seem to be handled #722

Closed
@srilumpa

Description

@srilumpa

Request Type

Bug

Work Environment

Question Answer
OS version (server) Ubuntu
TheHive version / git hash 3.1.0-RC3
Package Type From source

Problem Description

When a responder has multiple operations, it seems only the first one is being executed by TheHive.

Steps to Reproduce

  1. Have an analyzer with two AddTagToCase operations
  2. Execute it on a case
  3. See the first tag appears but never the second one

Complementary information

My responder has the following operations:

    def operations(self, raw):
        ops = []
        ops.append(self.build_operation('AddTagToCase', tag="ticket:{}#{}".format(self.instance_name, raw['issue']['issue']['id'])))
        ops.append(self.build_operation('AddTagToCase', tag="ticket created"))
        return ops

When I execute the responder, only the first tag (ticket:name#num) appears. The two operations are present in the Cortex output If I comment the first operation build, I have the second tag appearing (ticket created)

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions