New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Artifacts reports are not merged when merging cases #446

Closed
srilumpa opened this Issue Jan 23, 2018 · 4 comments

Comments

Projects
None yet
3 participants
@srilumpa
Contributor

srilumpa commented Jan 23, 2018

Request Type

Feature Request

Work Environment

Question Answer
OS version (server) Debian
TheHive version / git hash 3.0.3
Package Type DEB

Problem Description

When merging two cases, the artifacts of the newly created case do not have any previously generated reports.

Steps to Reproduce

  1. Execute at least one analyzer on an artifact
  2. Merge the case of the artifact with some other case
  3. The associated artifact in the new case does not have any report and it is necessary to run analyzers again

Possible Solutions

When merging two artifacts, the case_artifact_job objects associated to both artifacts should be found from the database, copied and linked to the newly created artifact. Recreating the short reports for the artifacts should be done by using for each analyzer the most recent report.

@nadouani nadouani added the bug label Jan 30, 2018

@To-om To-om added this to the 3.0.10 milestone May 2, 2018

@To-om To-om closed this May 2, 2018

@srilumpa

This comment has been minimized.

Contributor

srilumpa commented Jun 21, 2018

Was this fix included in the 3.0.10 version? I still see the issue.

@To-om

This comment has been minimized.

Contributor

To-om commented Jun 21, 2018

Yes, this issue should be fixed is 3.0.10. Do you see error message in logs (something like "Fail to create job under artifact ...") ?

@srilumpa

This comment has been minimized.

Contributor

srilumpa commented Jul 6, 2018

Sorry to anwser this late.

No I don't find errors of any kind in my instance logs. The reports seems to be accessible: after merging two cases I can read the full list of long reports for one specific artifact if I open it. But the mini-reports on the artifacts list are not displayed.

@srilumpa

This comment has been minimized.

Contributor

srilumpa commented Jul 27, 2018

Any news on this? Have you been able to reproduce the bug? Do you need me to open a new issue for this?

@To-om To-om reopened this Jul 27, 2018

@To-om To-om modified the milestones: 3.0.10, 3.1.0 (Cerana 1) Jul 27, 2018

@To-om To-om closed this Jul 27, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment