graylog-plugin-alert-wizard
graylog-plugin-alert-wizard copied to clipboard
airbus-cyber
Error when importing a rule with a null description
POST /api/plugins/com.airbus_cyber_security.graylog.wizard/alerts with the null value for the description field
It will return a 400 Bad request: Cannot construct instance of [...], problem: Null getDescription [...]
(This error happens when I tried to import a rule with a null description) (I don't know how it is possible to get a null description because it always seems to be an empty string instead of a null value when there is no description)
Is this still necessary? Do you still have rules with null descriptions? Could you attach an example of such rule to the issue? Thank you.
When there is no description, the export is supposed to write a JSON file with the description field set to empty string (and not null). It would be great to be able to identify the scenario which led to the generation of a JSON file with a null description and fix this issue at its root rather than make the import code more complex than necessary.
This should not happen. It must come from a script modifying the JSON. This issue won't be fixed at the moment. Issue is "in observation" for 1 year. If it happens again it will be fixed, otherwise it will be refused.
Issue has just happened, I didn't use any script, I've only exported rules from a Wizard v4.4.1. I've more than 100 rules in the JSON and only 1 rule has a null description.
It would be interesting to export the rule alone. And try to reproduce the problem starting from an empty graylog.