cti-python-stix2
cti-python-stix2 copied to clipboard
When using query with Composite data source, can we have meta data in results (like which data source the record came from)
I've been learning stix2 here, and, for example if I run a search on a bunch of collections for a specific filter, I may want to understand the id and title of the specific collection that result came from. I am not sure if it's my newness to stix2 that is causing this, but the only way I could see to do this is to break up the collections I want to search into single collection data sources and search each individually. If I get a result, I tag on the collection and id onto that result.
Is there a way to access this data as part of the results without having to do. the looping myself?
Hi @JohnOmernik, you're right; there's currently no way to get that metadata without doing the looping yourself. Part of the reason for this is to maintain consistency with the other datastore backends that do not have a "collection" concept.