TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform
https://thehive-project.org
GNU Affero General Public License v3.0
3.28k stars 609 forks source link

[Bug] Filter visualization not accurate #2313

Open michaelhulgan opened 2 years ago

michaelhulgan commented 2 years ago

Request Type

Bug

Work Environment

Question Answer
OS version (server) Rocky Linux release 8.4 (Green Obsidian)
OS version (client) Rocky Linux release 8.4 (Green Obsidian)
Virtualized Env. True
Dedicated RAM 4 GB
vCPU 6
TheHive version / git hash 4.1.13-1
Package Type Docker
Database Cassandra / BerlkelyDB
Index type Elasticsearch
Attachments storage Local, NFS, S3, HDFS
Browser type & version If applicable

Problem Description

When my SOC analysts attempt to click a filter and change the value from "=," to another option in the drop down, it never visually reflects the selection. However, I notice that in my filters applied section, it indeed does apply the filter that I specified. The visualization piece not working results in misinterpretation of the data ingested.

Steps to Reproduce

  1. Go to cases
  2. Attempt to apply a filter (When filtering on computed.handlingduration fields I am unable to filter on anything other than = and "is empty". There are other options such as != and <, but it always defaults back to =.)

Possible Solutions

I've figured out that this is only a visualization as I can get the expected results as indicated in the screenshot.

Complementary information

image