connectors icon indicating copy to clipboard operation
connectors copied to clipboard

[Splunk-connector] batch_save

Open Tonnulus opened this issue 3 years ago • 0 comments

Description

If Splunk-connector try to modify a deleted (or not present) item in Splunk. I have a 404 error (Only I slunk logs ref )

If an element is not present, it should be created

Environment

  1. debian
  2. OpenCTI version: 5.5.1

Reproducible Steps

  1. Use this connector with a new Kvstore
  2. On Opencti updates an item that is not present in Splunk

Expected Output

The element is created in Splunk

Actual Output

Nothing

Additional information

Maybe you can use batch_save

Screenshots (optional)

Tonnulus avatar Feb 20 '23 11:02 Tonnulus