search

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.24k stars 922 forks source link

Reports don't manage correctly big numbers of entities #6839

Open jborozco opened 5 months ago

jborozco commented 5 months ago

Created from https://github.com/OpenCTI-Platform/opencti/issues/6499

Description

When there are too many entities in a report:

Environment

  1. OS (where OpenCTI server runs): { e.g. Mac OS 10, Windows 10, Ubuntu 16.4, etc. }
  2. OpenCTI version: { e.g. OpenCTI 1.0.2 }
  3. OpenCTI client: { e.g. frontend or python }
  4. Other environment details:

Reproducible Steps

Have a report with I couldn't reproduce it but the are a lot of info and screenshot here https://github.com/OpenCTI-Platform/opencti/issues/6499

In theory, open a report with 3k entities

Expected Output

All entities are visualised

Actual Output

The pages are blank

Additional information

Screenshots (optional)

jborozco commented 5 months ago

related to https://github.com/OpenCTI-Platform/opencti/issues/6499

richard-julien commented 4 months ago

Can you provide a repro case on testing @jborozco? thanks

jborozco commented 3 months ago

Reproducible here https://testing.octi.staging.filigran.io/dashboard/analyses/reports/3ba859df-b1fd-4bd1-bcf8-8307a31a8dc1/entities

Entity list image

Knowledge graph image

In theory there should be around 8k entities in this graph image

AlexSanchezN commented 2 months ago

Sorry to intrude... is there any prevision for this? It makes analyzing large sets of data a pain :-)

Thanks for your effort!!

dominictory commented 1 month ago

Not sure if related, but on some reports that have correlated reports, a report shows nothing on the correlation view of the Knowledge tab, attached screenshots. The correlated reports though do show this view:

image image image