Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Playbooks] unable to filter on "Platform Creation Date" on "Query knowledge on regular basis" #8721

Closed
EinatAR opened this issue Oct 21, 2024 · 1 comment · Fixed by #8955
Assignees
Labels
bug use for describing something not working as expected playbook Linked to automation engine solved use to identify issue that has been solved (must be linked to the solving PR)

Comments

@EinatAR
Copy link

EinatAR commented Oct 21, 2024

Description

Error messaged received when trying to create a Playbook that "Query knowledge on regular basis" with a "Platform Creation Date" filter -> receives an Error (see below)

Environment

OpenCTI version: 6.3.6

Reproducible Steps

  1. Go to Data > Processing > Create a new playbook
  2. Click the rectangle to create the first step of the playbook and choose ""Query knowledge on regular basis"
  3. Fill in the info and add the filter "Platform creation date" with a date

Example:

Screenshot 2024-10-21 at 14 12 32

Expected Output

Should filter results from the date noted in the filter

Actual Output

Error message:

Screenshot 2024-10-21 at 14 12 12
@EinatAR EinatAR added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Oct 21, 2024
@nino-filigran nino-filigran added playbook Linked to automation engine and removed needs triage use to identify issue needing triage from Filigran Product team labels Oct 22, 2024
@nino-filigran
Copy link

@EinatAR I've reproduced but be aware that this playbook might be difficult to maintain while we do not have any dynamic filtering (given that we'll fetch a max of 5000 entities). The more time past, the more entities will be re-fetched. Therefore, you would need to update the date manually if you want to ensure that data is always fetched as expected. Ping me if you need more information :)

@Archidoit Archidoit self-assigned this Nov 8, 2024
@Archidoit Archidoit modified the milestones: Bugs backlog, Release 6.3.12 Nov 8, 2024
@Archidoit Archidoit added the solved use to identify issue that has been solved (must be linked to the solving PR) label Nov 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected playbook Linked to automation engine solved use to identify issue that has been solved (must be linked to the solving PR)
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants