TheHive4py
TheHive4py copied to clipboard
TheHiveApi.find_alerts cannot find alerts with specific custom field
Request Type
Bug
Work Environment
Question | Answer |
---|---|
OS version (server) | Ubuntu |
OS version (client) | 10, Ubuntu |
TheHive4py 1.8.1 |
Problem Description
When I am using find_alerts with specific customField in query, the result is empty. I tried find_cases and API request and both works without problem.
Steps to Reproduce: in attach files
+1 I have updated my thehive for the v4 and I am using thehive4py 1.8.1. Since thehive update, the query with In("customFields.client.string", CLIENT) does not retrieve anything, but I am sure there are alerts. CLIENT is an array The query worked before, maybe there is some change that I have to do for the new version...
@wloody54 your query in curl is wrong.
Look at the example in code:
My code is equal. The datatype is "customFields.client.string" and the CLIENT is an array.
I think the problem is datatype being a customField