Not able to create Case Observable

[abhijeetasawant]

Not able to create Case Observable

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	Ubuntu
OS version (client)	Ubuntu
TheHive4py version / git hash	1.7.0.post1

Problem Description

api.create_case_observable(case_id, obs) fails with error code 400 with error message : "Unknown attribute case_artifact.id.

Detailed response :
{"tableName":"case_artifact","type":"AttributeCheckingError","errors":[{"name":"case_artifact.id","type":"UnknownAttributeError","message":"Unknown attribute case_artifact.id: {"type":"JsonInputValue","value":null}","value":{"type":"JsonInputValue","value":null}}]}

Steps to Reproduce

1. Create TheHiveApi.
2. Create CaseObservable.
3. Call api.create_case_observable(case_id, obs)
4. returns error 400

Possible Solutions

CaseObservable.jsonify() adds "id":null attribute to json. I think this attribute should be removed.

[Felix83000]

Same error here... Please Help :)
For now it is indeed impossible to create any observable...

[nadouani]

Hello @abhijeetasawant can you share a code sample that fails? I suppose that obs in api.create_case_observable(case_id, obs) is an instance of thehive4py.models.CaseObservable ?

[abhijeetasawant]

Yes obs is an instance of thehive4py.models.CaseObservable ?
Sample Code :

    api = TheHiveApi(url, api_key)
    obs = CaseObservable(dataType=data_type,
                         message=description,
                         data=data)

    result = api.create_case_observable(case_id, obs)

[nadouani]

Got it, the create_case_observable method doesn't exclude the id when calling the API.

Will make a fix for a 1.7.1 patch by tomorrow

[nadouani]

Guys, could you please update thehive4py and tell me if the problem is solved? I've just released a 1.7.1 version

[abhijeetasawant]

Yes. Problem is solved. Thank you.

[Felix83000]

Ok for me. Thank you