Malpedia - Connector #3056
Labels
needs triage
use to identify issue needing triage from Filigran Product team
question
use for asking information about a functionality or behavior
Prerequisites
I read the Deployment and Setup section of the OpenCTI documentation as well as the Troubleshooting page and didn't find anything relevant to my problem.
I went through old GitHub issues and couldn't find anything relevant.
I googled the issue and didn't find anything relevant.
Description
I am encountering an issue regarding the Malpedia connector while creating a STIX 2.1 relationship object in OpenCTI. The system responds with the error:
{'name': 'UNSUPPORTED_ERROR', 'error_message': 'Input resolve refs expect single value'}
The object being sent is as follows:
{
"type": "relationship",
"spec_version": "2.1",
"id": "relationship--0271322f-4714-5b22-b4c4-ad8405a79f1e",
"created_by_ref": "identity--180d3ffd-a014-54ff-a817-211dddd29059",
"created": "2024-11-30T04:14:11.111244Z",
"modified": "2024-11-30T04:14:11.111244Z",
"relationship_type": "indicates",
"source_ref": "indicator--9505e0ad-73ba-5a96-88e2-fadb096e012a",
"target_ref": "malware--20f52322-29a4-5ac9-b58c-a105bddc624f",
"object_marking_refs": ["marking-definition--f88d31f6-486f-44da-b317-01333bde0b82"],
"nb_deps": 1,
"x_opencti_stix_ids": null,
"x_opencti_granted_refs": null,
"x_opencti_workflow_id": null
}
Environment
Reproducible Steps
Steps to recreate the issue:
Additional information
Logs:
-No additional logs from OpenCTI aside from the provided error message.
Troubleshooting steps taken:
-Validated the STIX 2.1 object format.
-Ensured all referenced objects exist in the OpenCTI database.
-Confirmed correct usage of object_marking_refs as an array of valid marking-definition identifiers.
The text was updated successfully, but these errors were encountered: