search

threatgrid / ctia

Cisco Threat Intelligence API
Eclipse Public License 1.0
69 stars 26 forks source link

Optimize lucene searches #1420

Closed ereteog closed 7 months ago

ereteog commented 7 months ago

Close #https://github.com/advthreat/iroh/issues/9155

rewrite wilcard queries that intend to search for ids.

§ QA

  1. Find (or create) an incident havinf relationships to sightings: incident -- member-of --> sighting
  2. note the incident short id
  3. search for the relationships of this incident /ctia/relationship/search?query="source_ref:*$incident-id", do not forget the * at the beginning (ex: `/ctia/relationship/search?query="source_ref:*incident-aa8c5f29-11dd-433e-9a82-6b560a47a2cb")