Skip to content

Ensure reports rel_object.internal_id are deduplicated #15207

@OctaveLaventure

Description

@OctaveLaventure

Description

The ingestion should deduplicate rel_object.internal_ids, but an account reported duplicated values here

Environment

  • OpenCTI version: 6.9.20

Reproducible Steps

No steps provided, analyze the Reports ingestion/creation code and try to find where a rel_object.internal_id field could eventually be created with multiple duplicated values, and to prevent it. If nothing comes up, close this issue until we get an actual repro case.

Expected Output

Actual Output

Additional information

Screenshots (optional)

Metadata

Metadata

Labels

buguse for describing something not working as expectedneeds more infoIntel needed about the use case

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions