Data Synchronization failing about opencti

[SamuelHassine]

Hello @openctitest,

Taking a look right now. We have a pretty good idea about what is causing those errors, still investigating.

[SamuelHassine]

This should be fixed in 5.9.4. Please re-open an issue if it is not the case.

[SamuelHassine]

5.9.4 to be released now.

[openctitest]

Thanks, I'll verify it today

[openctitest]

@SamuelHassine I the cluster instances to 5.9.4 and I'm still seeing the same error. It throws it right away now when I attempt to sync, previously it had been able to sync over 3000 or so entities before it failed.

[SamuelHassine]

Hello,

Still the same logs?

Do you have access to Kibana? Are you able to jump on a call with our team for a troubleshoot session?

[openctitest]

Still the same logs, yes. I do have access to Kibana, is there anything in particular I should look for?

[SamuelHassine]

Hello,

Yes, on all opencti_* indices, in "Discover", do the following query:

fromType.keyword: "threat-actor"

And see how many results you have.

[SamuelHassine]

You should have none.

[openctitest]

Correct, I have no results

[SamuelHassine]

Ok thanks, it will be fixed in 5.9.5.

[openctitest]

Great thanks! I'll verify when it gets released

[SamuelHassine]

We will release in 1 hours approx.

[openctitest]

Thanks!

[openctitest]

Synchronizing now. Going to let it finish to make sure but I'm no longer seeing the error. Thanks for the quick fix!