opencti icon indicating copy to clipboard operation
opencti copied to clipboard

Labels appear fairly broken in 5.12.29

Open MaxwellDPS opened this issue 1 year ago • 4 comments

Description

Sorting Entities on labels is broken, and loading labels is painfully slow and crashes the brower stack

http://localhost:8080/dashboard/data/entities?filters={"mode":"and","filters":[{"id":"c1f93381-e619-4afd-a93f-ca39d316687c","key":"objectLabel","values":["39fa543d-7124-4867-8681-9b808c02f412"],"operator":"eq","mode":"or"}],"filterGroups":[]}&sortBy=created_at&orderAsc=false
self.helper.api.stix_cyber_observable.list(
            filters={
                "mode": 'or',
                "filters": [{
                        "key": "objectLabel", 
                        "values": _labels,
                        "mode": "or"
                }],
                "filterGroups": [],
            },
            getAll=True
        )

Environment

  1. OS (where OpenCTI server runs): CentOS Stream 9
  2. OpenCTI version: 5.12.29
  3. OpenCTI client: frontend
  4. Other environment details: Cluster

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Visit URL above or filter on label via API
  2. get nothing

Expected Output

Objects that have the label

Actual Output

Nada

Additional information

Filters seem forked in 5.12.29

Screenshots (optional)

MaxwellDPS avatar Feb 16 '24 18:02 MaxwellDPS

I am assigning labels to Identities and they are disappearing in 5.12.29 @richard-julien FYSA

MaxwellDPS avatar Feb 16 '24 20:02 MaxwellDPS

@MaxwellDPS I can't reproduce your bug on demo. Do you have any other information to provide?

nino-filigran avatar Feb 19 '24 08:02 nino-filigran

We have a sync running atm, could try testing when syncing. As for labels, really not sure, memory seems to cap, but hard to tell as it legit crashes chrome

MaxwellDPS avatar Feb 20 '24 21:02 MaxwellDPS

Let me know when syncing is over and you when you'll be able to retry again. I also advise to upgrade to latest version in case. Please reach out if the problem persits, I keep this issue opened for now.

nino-filigran avatar Feb 22 '24 08:02 nino-filigran

Close for inactivity

richard-julien avatar Jun 17 '24 20:06 richard-julien