[crowstrike] Cannot process the message

[gileri]

Description

Environment

1. OS (where OpenCTI server runs): Official docker image
2. OpenCTI version: 6.4.2
3. OpenCTI client: python
4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Run connector

Expected Output

No crash or error

Actual Output

{"timestamp": "2024-12-03T13:22:31.209738Z", "level": "ERROR", "name": "CrowdStrike Endpoint Security", "message": "[API] Error while processing indicator", "exc_info": "NoneType: None", "taskName": null, "attributes": {"error_message": "One or more indicators have a warning or invalid input"}}
{"timestamp": "2024-12-03T13:22:37.669737Z", "level": "ERROR", "name": "CrowdStrike Endpoint Security", "message": "[API] Error while processing indicator", "exc_info": "NoneType: None", "taskName": null, "attributes": {"error_message": "One or more indicators have a warning or invalid input"}}
{"timestamp": "2024-12-03T13:22:46.374596Z", "level": "ERROR", "name": "CrowdStrike Endpoint Security", "message": "Error in ListenStream loop, exit.", "exc_info": "Traceback (most recent call last):\n  File \"/opt/opencti-connector-crowdstrike-endpoint-security/crowdstrike_connector/crowdstrike.py\", line 57, in _process_message\n    data = json.loads(msg.data)[\"data\"]\n           ^^^^^^^^^^^^^^^^^^^^\n  File \"/usr/local/lib/python3.12/json/__init__.py\", line 346, in loads\n    return _default_decoder.decode(s)\n           ^^^^^^^^^^^^^^^^^^^^^^^^^^\n  File \"/usr/local/lib/python3.12/json/decoder.py\", line 337, in decode\n    obj, end = self.raw_decode(s, idx=_w(s, 0).end())\n               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n  File \"/usr/local/lib/python3.12/json/decoder.py\", line 353, in raw_decode\n    obj, end = self.scan_once(s, idx)\n               ^^^^^^^^^^^^^^^^^^^^^^\njson.decoder.JSONDecodeError: Unterminated string starting at: line 1 column 1591 (char 1590)\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n  File \"/usr/local/lib/python3.12/site-packages/pycti/connector/opencti_connector_helper.py\", line 658, in run\n    self.callback(msg)\n  File \"/opt/opencti-connector-crowdstrike-endpoint-security/crowdstrike_connector/crowdstrike.py\", line 59, in _process_message\n    raise ValueError(\"Cannot process the message\")\nValueError: Cannot process the message", "taskName": null, "attributes": {"reason": "Cannot process the message"}}
Terminated

Additional information

I'm not sure the issue lie on the connector side, pycti, or opencti/platform itself.

Screenshots (optional)

[Megafredo]

This problem has already been identified and resolved, but it is currently merged but not deployed.
See : FiligranHQ/filigran-sseclient#1

[flavienSindou]

PR in pycti package OpenCTI-Platform/client-python#795