opencti
opencti copied to clipboard
Reports don't manage correctly big numbers of entities
Created from https://github.com/OpenCTI-Platform/opencti/issues/6499
Description
When there are too many entities in a report:
- Visualization in knowledge is empty
- The list of entites is empty (https://github.com/OpenCTI-Platform/opencti/issues/6499#issuecomment-2079175889)
Environment
- OS (where OpenCTI server runs): { e.g. Mac OS 10, Windows 10, Ubuntu 16.4, etc. }
- OpenCTI version: { e.g. OpenCTI 1.0.2 }
- OpenCTI client: { e.g. frontend or python }
- Other environment details:
Reproducible Steps
Have a report with I couldn't reproduce it but the are a lot of info and screenshot here https://github.com/OpenCTI-Platform/opencti/issues/6499
In theory, open a report with 3k entities
Expected Output
All entities are visualised
Actual Output
The pages are blank
Additional information
Screenshots (optional)
Can you provide a repro case on testing @jborozco? thanks
Reproducible here https://testing.octi.staging.filigran.io/dashboard/analyses/reports/3ba859df-b1fd-4bd1-bcf8-8307a31a8dc1/entities
Entity list
Knowledge graph
In theory there should be around 8k entities in this graph
Sorry to intrude... is there any prevision for this? It makes analyzing large sets of data a pain :-)
Thanks for your effort!!
Not sure if related, but on some reports that have correlated reports, a report shows nothing on the correlation view of the Knowledge tab, attached screenshots. The correlated reports though do show this view: