opencti
opencti copied to clipboard
[Export] Issue with text/plain exports
Description
When performing a simple text/plain export from within a report, an error "Connector ready to process the operation. This connector only supports list exports" is displayed. When going to the list export part from report entities on the same report and with the same criteria another error is displayed "Connector ready to process the operation, a bytes-like object is required, not 'list'".
Environment
OpenCTI 6.0.10
Reproducible Steps
Steps to create the smallest reproducible scenario:
- Export a report in text/plain format (from within the entity),
- The first error should appear in the data tab,
- Return to the list of report entities,
- Select the same report and open the export panel,
- Start an export from here with the same settings,
- The second error should appear.
Expected Output
The report and its contents should be exported in the defined format.
Actual Output
The connector is ready to process the operation, but is unable to execute it and no export is launched.
Screenshots (optional)
@NiQuintin On Public demo I could:
- reproduce the first error message: I've opened the report, clicked on Export, selected Text (max marking TLP Amber). Going to the data section, I had the same error. "Connector ready to process the operation. This connector only supports list exports". I also tried to generate an export directly from the Data tab and got the same (regardless if it's Full export or Simple Export).
- could not reproduce the other bug: I've been to entities, clicked on generate export, selected Text (max marking TLP Amber) and got the export successfully, regardless if it's a full or Simple Export.
However, on Testing I've been able to reproduce both. As a result, the first error is already present in production while the other one can should be fixed before it gets to production.
I think this one is already fixed, @NiQuintin can you retest? thanks
@richard-julien it works now from the exports list but I still have the same error from inside the report when I'm doing the export.
Its not an error, the connector only supporting exporting list. If you want to have a single export its more a feature request on the connector side.
Okay, it makes sense like that, so it's good for me.
I am just getting back to this now… Can you send me an example report/artifac/etc.t that allows me to successfully run the connector without getting the “list export” error/message? I want to understand what is needed to have a successful run.
@emaes A text/plain export from a list of entity (like reports) is working now. Note that the connector will only create a list of entity's names (ex.: the list of the name of all reports you've selected).
Closing the ticket as it is not a bug.
If you need an improvement of the connector, feel free to open a feature request issue into the connector repo.