Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Taxii feed: when updating feed to change starting date, the cursor should be reset #8463

Closed
aHenryJard opened this issue Sep 24, 2024 · 4 comments · Fixed by #8844
Closed
Assignees
Labels
bug use for describing something not working as expected ingestion Linked to ingestion (manual, from file, feeds & queue) solved use to identify issue that has been solved (must be linked to the solving PR)
Milestone

Comments

@aHenryJard
Copy link
Member

Description

Date added after and next cursor are during ingestion set by the taxii server, but when the date is changed manually on taxii feed configuration the cursor should be reset.
In current implementation the cursor is reset only when all data is consume (more = false in server response).

Use case is: for some reason if users wants to restart from another date than the current one that is set up, dependeing on taxii server implementation behavior can ignore date and take cursor.

Environment

  1. OS (where OpenCTI server runs): { e.g. Mac OS 10, Windows 10, Ubuntu 16.4, etc. }
  2. OpenCTI version: { e.g. OpenCTI 1.0.2 }
  3. OpenCTI client: { e.g. frontend or python }
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. { e.g. Run ... }
  2. { e.g. Click ... }
  3. { e.g. Error ... }

Expected Output

Update taxii feed date, cursor is empty.

Actual Output

Update taxii feed date, cursor is not reset.

Additional information

Screenshots (optional)

@aHenryJard aHenryJard added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Sep 24, 2024
@nino-filigran nino-filigran added ingestion Linked to ingestion (manual, from file, feeds & queue) and removed needs triage use to identify issue needing triage from Filigran Product team labels Sep 25, 2024
@nino-filigran nino-filigran added this to the Bugs backlog milestone Sep 25, 2024
@richard-julien
Copy link
Member

Take also a look to other ingester.

@aHenryJard aHenryJard self-assigned this Oct 31, 2024
@aHenryJard
Copy link
Member Author

There is no cursor for CSV Feed and RSS Feed, so I don't think we need to change anything there.

@richard-julien
Copy link
Member

There is no start date but a still a state that cannot be reset. So its more about giving the possibility to reset the state maybe.

@aHenryJard
Copy link
Member Author

Proposal: Image

aHenryJard added a commit that referenced this issue Dec 10, 2024
@labo-flg labo-flg added the solved use to identify issue that has been solved (must be linked to the solving PR) label Dec 10, 2024
@labo-flg labo-flg modified the milestones: Bugs backlog, Release 6.4.4 Dec 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected ingestion Linked to ingestion (manual, from file, feeds & queue) solved use to identify issue that has been solved (must be linked to the solving PR)
Projects
None yet
4 participants