You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Lhorus6 opened this issue
Dec 11, 2023
· 3 comments
Assignees
Labels
buguse for describing something not working as expectedcriticaluse to identify critical bug to fix ASAPsolveduse to identify issue that has been solved (must be linked to the solving PR)
The actions performed during a playbook are not performed when an "Apply predefined rule" component is present, despite the fact that the data in the "send for ingestion" logs is correct.
The same playbook without the "Apply predefined rule" component works as expected. I've carried out a number of tests (e.g. location of the component in the playbook sequence, activation/deactivation of the "Manipulate all elements included in the bundle" options for other components, ...) but I haven't detected any particular logic behind this bug.
Environment
5.12.5
Reproducible Steps
Works
Create the following Playbooks:
Listen on Report modification --> Manipulate data to add the label "test-label" -> Send for ingestion
It works
Doesn't work
Create the following Playbooks:
Listen on Report modification --> Apply predefined rule: Resolve container references (add in bundle) --> Manipulate data to add the label "test-label" -> Send for ingestion
It doesn't work despite the fact that I can see the label on the report in the "send for ingestion" logs (see screenshot).
Screenshots
My playbooks:
The execution logs:
Send for ingestion logs:
My report AFTER playbook execution:
The text was updated successfully, but these errors were encountered:
Lhorus6
added
bug
use for describing something not working as expected
needs triage
use to identify issue needing triage from Filigran Product team
labels
Dec 11, 2023
Lhorus6
changed the title
[Playbooks] Bug after an "Apply predefined rule" component is present
[Playbooks] Bug when an "Apply predefined rule" component is present
Dec 11, 2023
After retesting, it was impossible to reproduce the bug described in this ticket. However, another error was observed:
Error
{
"message": "Cannot set properties of undefined (setting 'labels')",
"stack": "TypeError: Cannot set properties of undefined (setting 'labels')\n at Object.add (/opt/opencti/build/node_modules/fast-json-patch/commonjs/core.js:14:16)\n at applyOperation (/opt/opencti/build/node_modules/fast-json-patch/commonjs/core.js:235:60)\n at Object.applyPatch (/opt/opencti/build/node_modules/fast-json-patch/commonjs/core.js:280:22)\n at Object.executor (/opt/opencti/build/src/modules/playbook/playbook-components.ts:585:17)\n at playbookExecutor (/opt/opencti/build/src/manager/playbookManager.ts:135:44)\n at playbookExecutor (/opt/opencti/build/src/manager/playbookManager.ts:202:15)\n at processTicksAndRejections (node:internal/process/task_queues:95:5)\n at playbookExecutor (/opt/opencti/build/src/manager/playbookManager.ts:202:9)\n at playbookStreamHandler (/opt/opencti/build/src/manager/playbookManager.ts:268:13)\n at processStreamResult (/opt/opencti/build/src/database/redis.ts:613:3)\n at processStep (/opt/opencti/build/src/database/redis.ts:667:31)\n at processingLoop (/opt/opencti/build/src/database/redis.ts:684:13)",
"name": "TypeError"
}
richard-julien
changed the title
[Playbooks] Bug when an "Apply predefined rule" component is present
[Playbooks] "Apply predefined rule" without objects is not working
Dec 14, 2023
buguse for describing something not working as expectedcriticaluse to identify critical bug to fix ASAPsolveduse to identify issue that has been solved (must be linked to the solving PR)
Description
The actions performed during a playbook are not performed when an "Apply predefined rule" component is present, despite the fact that the data in the "send for ingestion" logs is correct.
The same playbook without the "Apply predefined rule" component works as expected. I've carried out a number of tests (e.g. location of the component in the playbook sequence, activation/deactivation of the "Manipulate all elements included in the bundle" options for other components, ...) but I haven't detected any particular logic behind this bug.
Environment
5.12.5
Reproducible Steps
Works
Listen on Report modification --> Manipulate data to add the label "test-label" -> Send for ingestion
It works
Doesn't work
Create the following Playbooks:
Listen on Report modification --> Apply predefined rule: Resolve container references (add in bundle) --> Manipulate data to add the label "test-label" -> Send for ingestion
It doesn't work despite the fact that I can see the label on the report in the "send for ingestion" logs (see screenshot).
Screenshots
My playbooks:
The execution logs:
Send for ingestion logs:
My report AFTER playbook execution:
The text was updated successfully, but these errors were encountered: