Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stix cyber observable - cant update existing observable using argument: update=True #1078

Closed
daryakoval opened this issue Feb 10, 2021 · 2 comments
Labels
feature use for describing a new feature to develop solved use to identify issue that has been solved (must be linked to the solving PR)
Milestone

Comments

@daryakoval
Copy link

Description

I am trying to update existing observable, using stix_cyber_observable.create() function, with argument: update=True.

result = client.stix_cyber_observable.create(simple_observable_id=id,
type='Email-Addr',
simple_observable_description=' test update description',
x_opencti_score=50,
update=True,
observableData={"value": "devtest2@test.com",
"display_name":"test-display name"} )

After I run this code, if there is no observable with same type and value, new observable created.
If there is already exist such observable with same value and type, nothing changes.
In second situation I enter id of the observable as it returned at the creation of observable. Tried with both simple_observable_id and id.

Environment

  1. OS Mac OS 10
  2. OpenCTI version: OpenCTI 4.0.7
  3. Other environment details: python 3.8

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Create observable using client.stix_cyber_observable.create function.
  2. save returned id.
  3. try to update some details of the same observable using client.stix_cyber_observable.create function with argument update=True.

Expected Output

Expect to see the change at the UI.. tried to update value, score, description, labels, marking but nothing changes, all details remain the same.

Actual Output

Tried to update value, score, description, labels, marking but nothing changes, all details remain the same, checked at the UI, also checked using stix_cyber_observable.list function. No changes appeared.

Additional information

@ShahafBenYakir
Copy link

Happens to me too.

@SamuelHassine SamuelHassine transferred this issue from OpenCTI-Platform/client-python Feb 14, 2021
@SamuelHassine SamuelHassine added the bug use for describing something not working as expected label Feb 14, 2021
@SamuelHassine SamuelHassine added this to the Release 4.2.2 milestone Feb 14, 2021
@SamuelHassine SamuelHassine added feature use for describing a new feature to develop and removed bug use for describing something not working as expected labels Feb 14, 2021
@SamuelHassine SamuelHassine added the solved use to identify issue that has been solved (must be linked to the solving PR) label Feb 14, 2021
@daryakoval
Copy link
Author

Hi, I still not able to update observable using this command.
If I use id - I receive unknown error, if I use simple_observable_id - no error, but nothing changes at the OPENCTI application.
Tried to update both score and description.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature use for describing a new feature to develop solved use to identify issue that has been solved (must be linked to the solving PR)
Projects
None yet
Development

No branches or pull requests

3 participants