Add customFields to Alert

[zpriddy]

No description provided.

[rolinh]

@nadouani This change breaks compatibility with TheHive 3.0.10 and earlier versions. It is unfortunate that such a change is part of a patch release (ie 1.5.1).

[info] o.e.ErrorHandler - POST /api/alert returned 400
org.elastic4play.AttributeCheckingError: [Unknown attribute alert.customFields: {"type":"JsonInputValue","value":{}}]
        at org.elastic4play.services.FieldsSrv.$anonfun$parse$7(FieldsSrv.scala:30)
        at org.scalactic.Bad.transform(Or.scala:1386)
        at org.elastic4play.services.FieldsSrv.parse(FieldsSrv.scala:30)
        at org.elastic4play.services.CreateSrv.create(CreateSrv.scala:108)
        at org.elastic4play.services.CreateSrv.apply(CreateSrv.scala:67)
        at services.AlertSrv.$anonfun$create$3(AlertSrv.scala:108)
        at scala.concurrent.Future.$anonfun$flatMap$1(Future.scala:304)
        at scala.concurrent.impl.Promise.$anonfun$transformWith$1(Promise.scala:37)
        at scala.concurrent.impl.CallbackRunnable.run(Promise.scala:60)
        at akka.dispatch.BatchingExecutor$AbstractBatch.processBatch(BatchingExecutor.scala:55)

[nadouani]

Hi @rolinh thanks for the remark. It's 100% valid. I personally didn't test that with TheHive 3.0.10 so forgot the breaking change.

Please stick with the 1.5.0 version, since we cannot remove supporting custom fields in alerts.

[saadkadhi]

@nadouani you mean 3.0.10 :)

[nadouani]

Well, looks like I'm still sleeping!

[rolinh]

@nadouani Yup, I'm sticking with 1.5.0 until I upgrade TheHive to v3.1.x. It's probably worth a HEADS UP in your blog post about TheHive4py 1.5 though ;)

[nadouani]

@rolinh Yes, we will update the blog post accordingly.

[saadkadhi]

https://twitter.com/TheHive_Project/status/1050679597291966464

[saadkadhi]

Blog post updated and @nadouani is going to offer tasteful croissants to the core team

[nadouani]

I'd offer that to all the community!

[saadkadhi]

By my last count, the community is about 100000 people spread across all the continents. Hope you have a very deep pocket :)