Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Incorrect stats: non-IOC observables counted as IOC and IOC word displayed twice #347

Closed
saadkadhi opened this issue Oct 19, 2017 · 1 comment
Assignees
Labels
Milestone

Comments

@saadkadhi
Copy link
Contributor

Request Type

Bug

Work Environment

Question Answer
OS version (server) Ubuntu
OS version (client) macOS
TheHive version / git hash 2.13.1
Package Type DEB
Browser type & version Chrome

Problem Description

In the Case > Observables tab, clicking on Stats will show in the Observables as IOC table:

  • number of non-IOC observables with an IOC label
  • number of IOC observables with the same label

Duh!

Steps to Reproduce

  1. Create a case
  2. Add 4 observables
  3. Flag 1 as IOC
  4. Click on Stats
  5. Look the results in the Observables as IOC table
  6. Go insane

Possible Solutions

Do the math George.

Complementary information

screen shot 2017-10-19 at 09 37 03

@saadkadhi saadkadhi added the bug label Oct 19, 2017
@saadkadhi saadkadhi added this to the 3.0.0 milestone Oct 19, 2017
@nadouani
Copy link
Contributor

This is a regression introduces by the move to ES5. In fact the result of an aggregation by a boolean field has a new structure, which breaks the behavior of the observable by IOC flag's stats panel.

@To-om To-om modified the milestones: 3.0.0, 2.13.2 Oct 23, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants