timesketch icon indicating copy to clipboard operation
timesketch copied to clipboard

Published 20 hours ago • verified publisher icon google

Customized columns are not populated

Open cudeso opened this issue 3 years ago • 2 comments

Describe the bug When you add additional columns in the explore view the columns are not filled with the data of entries.

To Reproduce Steps to reproduce the behavior:

  1. Done via https://demo.timesketch.org/sketch/6/explore (but similar behavior on latest Docker instance)
  2. Explore
  3. Add a column for which you're sure there is data (fe. IMP)
  4. Column remains empty

Expected behavior Columns to be filled with the data

Screenshots 2021-11-17 10_02_39-Szechuan Sauce - Challenge 2021-11-17 10_03_35-Szechuan Sauce - Challenge 2021-11-17 10_04_17-Szechuan Sauce - Challenge

Desktop (please complete the following information):

  • Browser Chrome
  • Version https://demo.timesketch.org/ ; but also latest Docker versions

cudeso avatar Nov 17 '21 09:11 cudeso

This is likely related to https://github.com/google/timesketch/issues/1630

@cudeso if you refresh the page or add another column the column should be populated @berggren could you PTAL this issue / 1630?

itsmvd avatar Nov 17 '21 10:11 itsmvd

This is likely related to #1630

@cudeso if you refresh the page or add another column the column should be populated @berggren could you PTAL this issue / 1630?

Indeed; adding another column or selecting fe. the next page in the results populates the columns.

cudeso avatar Nov 17 '21 11:11 cudeso

Yeah, this is a bug in the custom columns implementation. This has been fixed in the port to the new UI that is upcoming (in the next few weeks.

Will close this out as we don't have time to fix this in the old and soon to be deprecated UI.

berggren avatar Oct 15 '22 22:10 berggren