Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resolve container references Predefined Rule Error with Certain Relationships #10184

Open
blake-eakin-perch opened this issue Mar 7, 2025 · 0 comments
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team

Comments

@blake-eakin-perch
Copy link

Description

Environment

  1. OS (where OpenCTI server runs): ubuntu-jammy-22.04-amd64-server
  2. OpenCTI version: 6.5.1
  3. OpenCTI client: frontend
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Create a Playbook that has a "Listen knowledge event" for an update to Entity type "Incident Response Case"
  2. Add an "Apply predefined rule" component for the rule "Resolve container references (add in bundle)"
  3. Create an Incident Response Case
  4. Create a Process observable
  5. Create another Process observable that has the previously created observable as its Parent nested object relationship
  6. Open an investigation and add the second observable, then expand it on its parent
  7. Use the "Add to a container" button to add both observables and their relationship into the Incident Response Case created in step 3.
  8. Observe error in the last execution traces of the playbook created in step 1.

Expected Output

No error, rule is applied properly.

Actual Output

{
"message": "No relation converter available",
"stack": "GraphQLError: No relation converter available\n at error (/opt/opencti/build/back.js:1690:2273)\n at UnsupportedError (/opt/opencti/build/back.js:1690:4480)\n at convertToStix (/opt/opencti/build/back.js:1750:99119)\n at convertStoreToStix (/opt/opencti/build/back.js:1750:104274)\n at /opt/opencti/build/back.js:2451:41168\n at Array.map ()\n at stixLoadByIds (/opt/opencti/build/back.js:2451:41160)\n at runNextTicks (node:internal/process/task_queues:60:5)\n at processImmediate (node:internal/timers:454:9)\n at Object.executor (/opt/opencti/build/back.js:3079:3715230)\n at playbookExecutor (/opt/opencti/build/back.js:3079:3744426)\n at playbookExecutor (/opt/opencti/build/back.js:3079:3746618)",
"name": "GraphQLError"
}

Additional information

n/a

Screenshots (optional)

Image

Image

@blake-eakin-perch blake-eakin-perch added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Mar 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team
Projects
None yet
Development

No branches or pull requests

1 participant