Adding more than one observable to an entity fails. The observables appear to be successfully added with the relevant tags and links to the associated entity, however they do not appear in the "observables" tab of the entity. Binding between entities works fine.
Conditions under which the issue occurs is as follows:
Scenario 1: After adding an observable to an entity via the Search & Add page, attempting to add another new observable to the same entity. Observable type doesn't matter; it could be the same type (e.g. IP) or different (e.g. IP followed by ASN)
Scenario 2: Attempting to add more than one observable to an entity via entry box on the Search & Add page. Again, entity type doesn't matter....could be a list of IPs, could be an IP and a domain, etc.
See below for steps to reproduce.
**Notable observations:
The issue seems to be related to Yeti somehow caching the previously used observable type and attempting to apply it to the newly entered observable.
Noting the point above, attempting to add the same type of observable a second time still fails
Coming back to an entity doesn't work either. For example, add an IP to Actor 1, then add a domain to Actor 2, and then return to try to add an ASN to Actor 1 fails.
NOTE:
Testing has only been conducted via the UI
Testing has used both Actor and Malware entities, and both suffer from this issue.
Adding a new observable to a different entity works fine.
Description
This issue follows on from #586 .
Adding more than one observable to an entity fails. The observables appear to be successfully added with the relevant tags and links to the associated entity, however they do not appear in the "observables" tab of the entity. Binding between entities works fine.
Conditions under which the issue occurs is as follows:
Scenario 1: After adding an observable to an entity via the Search & Add page, attempting to add another new observable to the same entity. Observable type doesn't matter; it could be the same type (e.g. IP) or different (e.g. IP followed by ASN)
See below for steps to reproduce.
**Notable observations:
NOTE:
Environment
OS Version: Ubuntu 20.04 LTS Git commit: 0f919f8 Mongo version: 3.6.8
Note this is a new/fresh install.
Steps to Reproduce
Scenario 1:
Scenario 2:
Diagnostics
Logs from Scenario 1
Logs from Scenario 2