Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Breakdown of graphs do not work anymore. #5420

Closed
nino-filigran opened this issue Jan 8, 2024 · 2 comments
Closed

Breakdown of graphs do not work anymore. #5420

nino-filigran opened this issue Jan 8, 2024 · 2 comments
Assignees
Labels
bug use for describing something not working as expected solved use to identify issue that has been solved (must be linked to the solving PR)

Comments

@nino-filigran
Copy link

nino-filigran commented Jan 8, 2024

Description

Breakdown of graph do not work when using an entity.

Environment

Demo

Steps to reproduce

  1. Brekadwon by entity
  • create a dash
  • add a widget
  • select the "knowedge graph" visualisation
  • add the following as a relation "source type = malware AND relation type = targets AND target type = country"
  • click on the + to add a new entity
  • add the following attributes "entity type = malware AND relation type = targets"
  • in the visualisation, select "malware types"
  • validate
  1. Breakdwon by relation
  • create a dash
  • add a widget
  • select the "knowedge graph" visualisation
  • add the following as a relation "source type = malware AND relation type = targets AND target type = country"
  • click on the + to add a new relation
  • add the following attributes "source type = malware AND relation type = targets"
  • in the visualisation, select "entity type"
  • in the visu, display the source for each.
  • validate

Expected output:

  1. breakdown by entity: We should see a list of mawlare targeting some countries, broken down by the amount of types of malware.
  2. breakdown by relation: We should see a list of mawlare targeting some countries, broken down by the amount relations having as source malware and as a relation targets.

Current output:

  1. Breakdown by entity: it does not work. We see a list which is not broken down and when hovering, the value is "others = value of the line".
  2. Breakdown by relation: it works, we see a list of relations broken down.
    image
@nino-filigran nino-filigran added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team and removed needs triage use to identify issue needing triage from Filigran Product team labels Jan 8, 2024
@nino-filigran
Copy link
Author

@SamuelHassine just to be clear, I've specified 2 scenarios (adding an entity to breakdwon and adding a relation to breakdown) and the relation one is working as expected.

@SamuelHassine SamuelHassine added this to the Release 5.12.17 milestone Jan 9, 2024
@SamuelHassine
Copy link
Member

SamuelHassine commented Jan 9, 2024

What were the most common Impact (TA0040) techniques observed in incidents targeting the government sector in the last year?
Killchain filtering on "uses" relationship from incident to attack pattern
Breakdown Horizontal Bar Chart

@richard-julien richard-julien changed the title Breakdwon of graphs do not work anymore. Breakdown of graphs do not work anymore. Jan 14, 2024
@SamuelHassine SamuelHassine added the solved use to identify issue that has been solved (must be linked to the solving PR) label Jan 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected solved use to identify issue that has been solved (must be linked to the solving PR)
Projects
None yet
Development

No branches or pull requests

3 participants