-
Notifications
You must be signed in to change notification settings - Fork 911
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Export] Error when exporting "all selected" related entities of an entity #7625
Comments
Reproduced. I have the feeling that the export doesn't scope on the selected entity but tries to export all related entities. |
Not specific to tools and CSV. It's seems to be the case when trying to export "all selected" related entities and for the various export format. |
Exporting data from the platform is a basic and widely-used feature. So this is true : "the export doesn't scope on the selected entity but tries to export all related entities" -> maybe we should make it "critical", what do you think? |
Description
When trying to export Tools associated with a specific Intrusion set, the export starts, runs for minutes and then crashes (an error is raised)
Environment
OCTI 6.2.1
Reproducible Steps
Steps to create the smallest reproducible scenario:
-> An error appears after several minutes
Additional information
Exec info logs:
Traceback (most recent call last): File "/usr/local/lib/python3.11/site-packages/pycti/connector/opencti_connector_helper.py", line 349, in _data_handler message = self.callback(event_data) ^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/opencti-connector-export-file-csv/export-file-csv.py", line 277, in _process_message entities_list = self.helper.api_impersonate.stix2.export_entities_list( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.11/site-packages/pycti/utils/opencti_stix2.py", line 2316, in export_entities_list return do_list( ^^^^^^^^ File "/usr/local/lib/python3.11/site-packages/pycti/entities/opencti_stix_core_object.py", line 1383, in list result = self.opencti.query( ^^^^^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.11/site-packages/pycti/api/opencti_api_client.py", line 363, in query raise ValueError(value_error) ValueError: {'name': 'Runtime Object type "User" is not a possible type for "Identity".', 'error_message': 'Runtime Object type "User" is not a possible type for "Identity".'}
The text was updated successfully, but these errors were encountered: