marpoe
marpoe
### Request Type Bug ### Work Environment | Question | Answer |---------------------------|-------------------- | OS version (server) | RedHat, 7 | OS version (client) | Windows 10 | Cortex version /...
The String(query_string) https://thehive-project.github.io/TheHive4py/reference/query/#thehive4py.query.StartsWith) is not supported in TheHive4, but used in "query['_string'] = 'description:"{}"'.format(string)" in "TheHiveConnector.py" Fix-Recommendation: Delete: "query['_string'] = 'description:"{}"'.format(string) and add e.g.: query = ContainsString('description', format(string)) As well,...
### Request Type Bug ### Work Environment ### Problem Description If my Splunk Alert consists of multiple events (rows) and the alert setting is set to "ES notable mode" the...