OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform
https://opencti.io
Other
6.23k stars 921 forks source link

Extend multiselect and delete option for additional entity types #7072

Open Dirimsa opened 4 months ago

Dirimsa commented 4 months ago

Use case

(DOCKER Installation!)

Currently if you want to purge all data from the platform there are only 2 possible ways:

  1. Remove all Docker volumes from the underlying instance
  2. Remove all by hand using the Web UI

1) Has the implication that everything gets purged from the instance, including users, roles, groups, organizations and additional configurations which I'd want to keep

2) Can be done manually but has some other implications. Since Bulk Removal has been introduced this makes things a bit easier, but Bulk Removal is not available for the following entity types (which then need to be deleted one by one):

All of these have no option of selecting them all and bulk deleting them which makes purging this data manually quite a tedious task.

Current Workaround

Currently there are 2 possible workarounds:

1) Purge all data using the described option 1) and recreating all users afterwards 2) Writing a script to delete the data via GraphQL

Proposed Solution

Best solution in my opinion would be to create a tickbox for every entity which allows multiselect and delete option for this specific entity as is already implemented in the indicators and observables web UI page

Additional Information

None

If the feature request is approved, would you be willing to submit a PR?

No

nino-filigran commented 3 months ago

This is exactly the plan: https://github.com/OpenCTI-Platform/opencti/issues/4234 https://github.com/OpenCTI-Platform/opencti/issues/4230 https://github.com/OpenCTI-Platform/opencti/issues/3343 https://github.com/OpenCTI-Platform/opencti/issues/3284 https://github.com/OpenCTI-Platform/opencti/issues/6741