New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open cases not listed after deletion of merged case in UI #557

Closed
ParanoidRat opened this Issue Apr 26, 2018 · 1 comment

Comments

Projects
None yet
3 participants
@ParanoidRat

ParanoidRat commented Apr 26, 2018

Request Type

Bug

Work Environment

Question Answer
OS version (server) CentOS
OS version (client) Ubuntu
TheHive version 3.0.9
Package Type Docker

Problem Description

After erroneously merging two cases, re-opening the original one (merged from) and deleting the re-opened duplicate, TheHive no longer shows open cases including the freshly created ones.

Logs suggest it could not find a case (presumably, the deleted one)

[warn] o.e.s.AuxSrv - Entity case AWMDI7ETzWNNoiOk2Lk1 not found,
[warn] o.e.s.AuxSrv - Entity case AWMDI7ETzWNNoiOk2Lk1 not found,
[info] o.e.ErrorHandler - GET /api/case/AWMDdUh6zWNNoiOk2Lll?nstats=true returned 404,
org.elastic4play.NotFoundError: case AWMDI7ETzWNNoiOk2Lk1 not found,
	at org.elastic4play.database.DBGet.$anonfun$apply$2(DBGet.scala:38),
	at scala.Option.fold(Option.scala:158),
	at org.elastic4play.database.DBGet.$anonfun$apply$1(DBGet.scala:38),
	at scala.util.Success.$anonfun$map$1(Try.scala:251),
	at scala.util.Success.map(Try.scala:209),
	at scala.concurrent.Future.$anonfun$map$1(Future.scala:289),
	at scala.concurrent.impl.Promise.liftedTree1$1(Promise.scala:29),
	at scala.concurrent.impl.Promise.$anonfun$transform$1(Promise.scala:29),
	at scala.concurrent.impl.CallbackRunnable.run(Promise.scala:60),
	at akka.dispatch.BatchingExecutor$AbstractBatch.processBatch(BatchingExecutor.scala:55),
[warn] o.e.s.AuxSrv - Entity case AWMDI7ETzWNNoiOk2Lk1 not found,
[warn] o.e.s.AuxSrv - Entity case AWMDI7ETzWNNoiOk2Lk1 not found,
[warn] o.e.s.AuxSrv - Entity case AWMDI7ETzWNNoiOk2Lk1 not found,
[info] o.e.ErrorHandler - GET /api/case/task/AWMDI8TIljFRJkrq-gQ2 returned 404,
org.elastic4play.NotFoundError: case_task AWMDI8TIljFRJkrq-gQ2 not found,
	at org.elastic4play.database.DBGet.$anonfun$apply$2(DBGet.scala:38),
	at scala.Option.fold(Option.scala:158),
	at org.elastic4play.database.DBGet.$anonfun$apply$1(DBGet.scala:38),
	at scala.util.Success.$anonfun$map$1(Try.scala:251),
	at scala.util.Success.map(Try.scala:209),
	at scala.concurrent.Future.$anonfun$map$1(Future.scala:289),
	at scala.concurrent.impl.Promise.liftedTree1$1(Promise.scala:29),
	at scala.concurrent.impl.Promise.$anonfun$transform$1(Promise.scala:29),
	at scala.concurrent.impl.CallbackRunnable.run(Promise.scala:60),
	at akka.dispatch.BatchingExecutor$AbstractBatch.processBatch(BatchingExecutor.scala:55),

Possible Solutions

Fix the backend Elasticsearch index by updating the document with mergedFrom property referencing the _id of the deleted case. Just in case, also remove "highlighting" property (TheHive shows highlighted notice in the UI that case has been merged into another case) referencing the _id of the deleted case. TheHive started to show all open cases.

@ParanoidRat ParanoidRat changed the title from No open cases rendered after deletion of merged case in UI to Open cases not listed after deletion of merged case in UI Apr 27, 2018

@icoscx

This comment has been minimized.

icoscx commented May 1, 2018

Deleting one of the merged cases results in UI Error failing to display all other OPEN cases that were not deleted.

o.e.ErrorHandler - GET /api/case/AWMaryMGHgVtySE5riXK?nstats=true returned 404
	org.elastic4play.NotFoundError: case AWMarXxSHgVtySE5riW- not found
	org.elastic4play.database.DBGet.$anonfun$apply$2(DBGet.scala:38)
	scala.Option.fold(Option.scala:158)
	org.elastic4play.database.DBGet.$anonfun$apply$1(DBGet.scala:38)
	scala.util.Success.$anonfun$map$1(Try.scala:251)
	scala.util.Success.map(Try.scala:209)
	scala.concurrent.Future.$anonfun$map$1(Future.scala:289)
	scala.concurrent.impl.Promise.liftedTree1$1(Promise.scala:29)
	scala.concurrent.impl.Promise.$anonfun$transform$1(Promise.scala:29)
	scala.concurrent.impl.CallbackRunnable.run(Promise.scala:60)
	akka.dispatch.BatchingExecutor$AbstractBatch.processBatch(BatchingExecutor.scala:55)
o.e.s.AuxSrv - Entity case AWMat-oxHgVtySE5riXY not found
o.e.s.AuxSrv - Entity case AWMarXxSHgVtySE5riW- not found

@To-om To-om self-assigned this May 2, 2018

@To-om To-om added the bug label May 2, 2018

@To-om To-om added this to the 3.0.10 milestone May 2, 2018

@To-om To-om closed this May 2, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment