opencti icon indicating copy to clipboard operation
opencti copied to clipboard

TAXII Ingestion: Undefined taxii objects - When running as non SYSTEM

Open MaxwellDPS opened this issue 7 months ago • 12 comments

Description

In the event a TAXII server is requires a trailing / the taxii ingestion fails with Undefined taxii objects

In this instance for the TAXII server that is failing

  • This works potato.taxi/taxii2/collections/abcd/objects/
  • This does not potato.taxi/taxii2/collections/abcd/objects and will return {}

Environment

  1. OS (where OpenCTI server runs): CentOS Stream
  2. OpenCTI version: 6.2.6
  3. OpenCTI client: frontend
  4. Other environment details: Clusered

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Setup taxii server that requires a trailing / or returns {} w/o a trailing slash ex potato.taxi/taxii2/collections/abcd/objects
  2. Add as a taxii source
  3. Nothing imports

Expected Output

N/A

Actual Output

N/A

Additional information

{
    "category": "APP",
    "context": "Taxii 2.1 transform",
    "errors": [
        {
            "attributes": {
                "genre": "TECHNICAL",
                "http_status": 500
            },
            "message": "Undefined taxii objects",
            "name": "UNKNOWN_ERROR",
            "stack": "UNKNOWN_ERROR: Undefined taxii objects\n    at error (/opt/opencti/build/src/config/errors.js:8:10)\n    at UnknownError (/opt/opencti/build/src/config/errors.js:82:47)\n    at taxiiV21DataHandler (/opt/opencti/build/src/manager/ingestionManager.ts:256:19)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at async Promise.all (index 0)\n    at async Promise.all (index 1)\n    at ingestionHandler (/opt/opencti/build/src/manager/ingestionManager.ts:369:5)\n    at /opt/opencti/build/src/manager/ingestionManager.ts:388:9\n    at eSt.#runHandlerAndScheduleTimeout (/opt/opencti/build/node_modules/set-interval-async/dist/set-interval-async-timer.cjs:36:13)\n    at Timeout._onTimeout (/opt/opencti/build/node_modules/set-interval-async/dist/set-interval-async-timer.cjs:29:13)"
        }
    ],
    "level": "error",
    "message": "Undefined taxii objects",
    "name": "THAT-FEED",
    "source": "backend",
    "timestamp": "2024-07-18T23:50:49.175Z",
    "version": "6.2.6"
}

MaxwellDPS avatar Jul 19 '24 00:07 MaxwellDPS