Frontend error on enormous number of IOCs in Analyst Workbench

[leitosama]

Description

Frontend returned unknown error when I was trying to verify a number of observables (~250-300) from imported text.

Environment

1. OS (where OpenCTI server runs): OpenShift Container Platform
2. OpenCTI version: OpenCTI 6.3.13
3. OpenCTI client: frontend
4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Generate data for import with 250-300 observables (for example, try to import IP range 172.17.{0-1}.{1-150})
2. Import using "Import page" with ImportDocument connector
3. Open recently created workbench after import
4. Try to list parsed observables

Expected Output

I can list and verify all parsed observables in workbench.

Actual Output

Got a frontend Error "An unknown error occurred. Please provide a support package to your administrator or OpenCTI maintainers"

Additional information

support.2024-11-25-ace72877-728f-4d9b-9c91-fd3c0af5e3f6.log

[nino-filigran]

We have tried with latest version (6.4.1) and it does not seem to happen ( tried with 500 observables). Would you mind ot upgrade & let me know if the probelm still happens?

[leitosama]

Don't like switch to new major version, but I will try upgrade today.

[leitosama]

Recheck on version 6.4.1, same error. Browser - Chromium.

support.2024-11-26-c5a79b7e-87fd-46d4-b42b-7ebb15277d59.log

Screen_record_26_11_2024_17_59_41.mp4

[nino-filigran]

Ok thanks for testing this and sorry to see it did not fix your problem. I don't know why I don't have this issue on our public demo. Anyway we'll investigate on this.