Incomplete JSON export of reports

[yassine-ouaamou]

Description

When exporting a report from the reports list, if it contains many entities, some of them are not included in the generated bundle

Environment

Testing (6.0.8)

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Create a report
2. Include arount 50 entities and a PDF in it
3. Go to the reports list
4. Select the created report and click on the export button
5. Generate an export (JSON, full export, no marking)
6. Download the generated JSON

Expected Output

The bundle contains the pdf and all the included entities

Actual Output

Many entities are missing

Additional information

Here is the report I used to reproduce: https://testing.octi.staging.filigran.io/dashboard/analyses/reports/86ec8fd0-9b66-4971-9348-8828d4ce1c74

Screenshots (optional)

[nino-filigran]

potentially linked with: #5798

[AlexSanchezN]

Should that be solved on 6.0.10?
I'm in 6.0.10, and we have reports with many entities as seen on the first image
That only show a few of the objects in knowledge (second image)
And only export a few objects from the Data tab -->
2024-04-19T14 40 41.122Z_TLP ALL_(ExportFileStix)_Report-Sensor sensor1792.etic.security (Week 16)_full.json

[SamuelHassine]

To be qualified.

[jborozco]

@AlexSanchezN according to your graph, there might be a filter still active, could you try to clear your local storage and retry ?

[AlexSanchezN]

Hi @jborozco , thanks for your help.

It happens in different browsers, different computers and in incognito mode. I've reseted cookies, and cleared data and the problem persists. In fact nothing is shown in the knowledge window in this case.
The images are from a different computer and in incognito mode
I know for sure that the bundle used to create those reports, includes notes, vulnerabilities and relations. But none of those appear either in knowledge.
Although as it can be seen in the 3rd image below there are 3.600 entities counted but are not shown in the entities list.
Is it possible that Note type is not shown on the entities list?. There should be a lot of notes there with vulnerabilities and its relations to ipv4 observables.

[jborozco]

Notes should present in entities in theory

@richard-julien @Kedae I can't reproduce, but something seems off, do you have an idea of where the problem could come from ?

[AlexSanchezN]

Maybe the attached video explains better the situation with notes inside a report.

SCUD.CTI.Mozilla.Firefox.2024-04-26.13-02-23.mp4

As you can see, it looks like notes are not shown in lists.
And we see no vulnerabilities either.

[AlexSanchezN]

Notes should present in entities in theory

@richard-julien @Kedae I can't reproduce, but something seems off, do you have an idea of where the problem could come from ?

By the way. You have two notes in that report, but they are not counted... it says 0 entities in the upper right counter

[jborozco]

I just didnt refresh the page after adding entity, when I do I see the right number.

[jborozco]

The issue seems to be that report can't handle big number of entities

[AlexSanchezN]

Glad there is a clue.
It used to work a few versions ago. Provably in version 5.x.x

[jborozco]

As discussed with @yassine-ouaamou , I'm creating a new issue here #6839 and closing this one to keep issues separated.