-
Notifications
You must be signed in to change notification settings - Fork 976
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[live stream] external references are not synced #8545
Comments
@axelfahy You confirm you are in 6.3.4 and you've tester in 6.3.4? Can be related to the bug with have fixed this week-end. |
Yes, I am in 6.3.4 |
Ok, @richard-julien confirmed we seem to have an issue with external references, we will come back to you. |
To be sure I understand correctly, to have all the removal events applied on the destination, I must set the "perfect synchronization" option? Without this option, no removal will be done on the destination, even if there was no modification on the object to be removed on the destination? |
I observed another suspicious behavior with perfect sync. Steps to reproduce:
|
Looks related to an incorrect validation function that prevent the external refs creation. |
@romain-filigran could you describe the exact steps to reproduce the issue ? |
Description
I am having trouble syncing external references of a report using live streams.
I tested two cases, one with "perfect synchronization" and one without it:
Without perfect synchronization:
If I create a report, add an external reference, it is correctly sync with the destination.
However, if I remove the external reference in the report afterwards, it is not removed on the destination.
Same thing happends with the label added and then removed.
With perfect synchronization:
If I create a report, add an external reference, the external reference is never added to the destination.
However, the label is added correctly to the report and removed afterwards as well.
Is this expected? How can I sync two opencti instances and have the external references and labels of a report synced when being added and removed as well?
Environment
Reproducible Steps
Steps to create the smallest reproducible scenario:
Expected Output
I expect to have the external references and the labels added correctly, then removed.
Actual Output
External reference is never removed from the report, or not even added with perfect sync.
Additional information
Screenshots (optional)
Example without perfect sync:
Example with perfect sync:
The text was updated successfully, but these errors were encountered: