Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] V4 Merge observable tags with existing observables during importing alerts into case #1499

Closed
andrewthad opened this issue Aug 28, 2020 · 0 comments
Assignees
Labels
bug TheHive4 TheHive4 related issues
Milestone

Comments

@andrewthad
Copy link

Work Environment

Question Answer
OS version (server) Ubuntu
OS version (client) Ubuntu
TheHive version 4.0.0
Package Type Docker

Problem Description

Copying the problem description from #1014:

If you import an alert to case that has observables, these observables are merged into the case.
If the observables already exist they are not created. But if the alert observables have tags set
that are not present at the case-observables they are not added.

This was fixed in the 3.X series, but in 4.0 this has regressed.

Possible Solutions

I believe that a565f83 can just be ported to the 4.0 branch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug TheHive4 TheHive4 related issues
Projects
None yet
Development

No branches or pull requests

2 participants