Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[elastic] Elastic Threat Intel Connector: AttributeError: 'NoneType' object has no attribute 'split'

See original GitHub issue

I’m running OpenCti 5.1.3 on docker; I have a problem with Elastic Threat Intel Connector:

[2021-12-28T10:08:21.872][INFO] Connected to Elasticsearch [2021-12-28T10:08:21.872][INFO] Setting up Elasticsearch for OpenCTI Connector [2021-12-28T10:08:21.882][INFO] Installing index template: opencti [2021-12-28T10:08:21.888][INFO] Index already exists [2021-12-28T10:08:21.891][INFO] Signals manager thread initialized [2021-12-28T10:08:21.891][INFO] Signals manager thread starting [2021-12-28T10:13:55.577][ERROR] Data type unsupported: identity. Only 'indicators are currently supported. [2021-12-28T10:13:56.275][ERROR] Data type unsupported: identity. Only 'indicators are currently supported. [2021-12-28T10:43:56.003][ERROR] Data type unsupported: identity. Only 'indicators are currently supported. [2021-12-28T14:29:54.954][ERROR] Data type unsupported: url. Only 'indicators are currently supported. [2021-12-28T14:30:00.685][WARNING] _parse() not implemented for url Exception in thread Thread-3: Traceback (most recent call last): File “/usr/local/lib/python3.9/threading.py”, line 973, in _bootstrap_inner self.run() File “/runtime/lib/python3.9/site-packages/pycti/connector/opencti_connector_helper.py”, line 365, in run self.callback(msg) File “/runtime/lib/python3.9/site-packages/elastic/elastic.py”, line 147, in _process_message round(int(event_id.split(“-”)[0]) / 1000), tz=timezone.utc AttributeError: ‘NoneType’ object has no attribute ‘split’

Can you help me ? regards.

Issue Analytics

State:
Created 2 years ago
Comments:6 (4 by maintainers)

Top GitHub Comments

1reaction

pbonfacommented, Feb 8, 2022

many thanks, with this filter applied to stream it works fine! (I also upgraded to version 5.1.4)

1reaction

nor3thcommented, Jan 28, 2022

@dcode Could you take a look at this please?

Top Results From Across the Web

AttributeError: 'NoneType' object has no attribute 'split'

It can happen, that the string has nothing inside, than it is "None" type, so what I can suppose is to check first...

Ingesting threat data with the Threat Intel Filebeat module

In future blog posts, we'll cover enriching threat data with the Threat ECS fieldset and operationalizing threat data with Elastic Security.

Google Cloud release notes | Documentation

The following release notes cover the most recent changes over the last 60 days. For a comprehensive list of product-specific release notes, see...

Data Storage Software - NetApp Knowledge Base

Element Plug-in for vCenter server 4.3.0 not working with VLANs on storage ... Getting AttributeError: 'NoneType' object has no attribute ...

attributeerror - 'nonetype' object has no attribute 'keys' - You ...

elastic beanstalk error: attributeerror - 'nonetype' object has no attribute ... has no attribute 'split' I've thus far attempted to update everything to...