Skip to content

Opencti errors with Opensearch, replicas , component templates and UI "Cannot read properties of undefined (reading 'id')" #14542

@aalemanq

Description

@aalemanq

Description

Every time when Opensearch rotate index, my config of component template is gone and Opensearch Apply default policy (5 shards 1 replica)

Environment

  1. OS (where OpenCTI server runs): { e.g. Mac OS 10, Windows 10, Ubuntu 16.4, etc. }
    Helm docker
  2. OpenCTI version: { e.g. OpenCTI 1.0.2 }
    6.9.10
  3. OpenCTI client: { e.g. frontend or python }
  4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Configure by hand in component templates: opencti-core-settings --> new shards/replica
  2. Rollover manual --> works
  3. After time, I don't know when, when index rotate automatic, if you come back in web to component templates: opencti-core-settings --> config is gone

Expected Output

My config applied on component template: opencti-core-settings

Actual Output

Default config index shards/replicas not my config

Additional information

This bug is related with some errors that appear when opensearch has replicas on index history, etc

---> Cannot read properties of undefined (reading 'id')
----> Cannot return null for non-nullable field Mutation.workAdd.

The thinig is: when I configured 0 replica in history, this error disapear....but I cannot mantain this template component because after time config is gone and again opensearch setup default shards/replicas. As far I know opensearch has a problem managing volume of data with replicas....someone know something?

This error appear after rotating index and apply default polcies not mines

Screenshots (optional)

Settings gone::

Image Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs more infoIntel needed about the use case

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions