opencti icon indicating copy to clipboard operation
opencti copied to clipboard

Not editable filter in Knowledge tab of an entity

Open Archidoit opened this issue 1 year ago • 1 comments

Reproducible Steps

  • Go to an entity overview (ex: a threat actor)
  • Go to the Knowledge tab
  • Go to the 'Indicators' panel

Actual output

  • A filter is automatically set ('contains XX') and is not editable but the cross is present and we can open the panel if we click on 'contains' and add entities in the filter

image

Expected output

The cross doesn't appear We should not be able to open the edition box of the filter

Archidoit avatar Jun 24 '24 07:06 Archidoit

Validated! Additionnally, if there's no value in the "contained", the screen returns an error. In that case, we should only have an emty screen, not an error.

nino-filigran avatar Jun 26 '24 07:06 nino-filigran