search

LetMeR00t / TA-thehive-cortex

Technical add-on for Splunk related to TheHive/Cortex from TheHive project
GNU Lesser General Public License v3.0
47 stars 11 forks source link

[BUG] Exclude tags field from markdown table #77

Closed kwizzz closed 9 months ago

kwizzz commented 10 months ago

Request Type

Bug

Work Environment

v3.1 Queen

Problem Description

Fields used for tags should not be in the final markdown table.

Steps to Reproduce

  1. Take SPL from UC2
  2. Add another field tag with whatever values
  3. In Splunk action, define Tags as $result.tag$
  4. Enable generation of markdown table

I think that tags should never end up in the resulting table (as opposed to observables which make sense depending on the scenario).

LetMeR00t commented 9 months ago

Hello @kwizzz , A fix was provided for this issue, it will be available soon. Thank you for your submission