[harfanglabs] Error in the connector

[SamuelHassine]

Description

The connector is crashing in our internal demo env:

{"timestamp": "2024-03-25T04:55:23.644514Z", "level": "ERROR", "name": "HarfangLab", "message": "[CREATE] Failure stix observable created", "exc_info": "NoneType: None"}
{"timestamp": "2024-03-25T04:55:24.742582Z", "level": "ERROR", "name": "HarfangLab", "message": "Error in ListenStream loop, exit.", "exc_info": "Traceback (most recent call last):\n  File \"/usr/local/lib/python3.11/site-packages/pycti/connector/opencti_connector_helper.py\", line 633, in run\n    self.callback(msg)\n  File \"/opt/opencti-connector-harfanglab/harfanglab.py\", line 240, in _process_message\n    self.update_indicator(msg, \"stix\", \"IOCRule\", self.stix_list_id)\n  File \"/opt/opencti-connector-harfanglab/harfanglab.py\", line 420, in update_indicator\n    observables = entity[\"observables\"]\n                  ~~~~~~^^^^^^^^^^^^^^^\nTypeError: 'NoneType' object is not subscriptable", "attributes": {"reason": "'NoneType' object is not subscriptable"}}
Terminated```

[helene-nguyen]

@SamuelHassine this issue occured because the filter is not properly configured and checking it with @pierremahot, everything's working well.

Here's the details of the configuration:

@Megafredo found out this issue and is also currently improve the logs and the README documentation, the changes are coming soon.

And as a reminder for anyone who found this ticket, here the blog post for more details:

• https://blog.filigran.io/opencti-harfanglab-a-connector-to-enrich-cti-data-and-optimize-incident-response-0784b5c0717e