Incomplete search for Observable User Account entities.

[Lhorus6]

Description

Depending on the fields filled in an Observable User Account, it may not be possible to find it using the search. The problem is that the “User” field of an Observable User Account is not taken into account in the search. The same applies to the “Account login” field (and probably others).

Environment

OCTI 6.5.3

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Create an Observable User Account with the “User” field set to "myuseraccounttest"

2. Search for “myuseraccounttest” in the search bar
   -> you won't find anything.

3. Now delete this User Account and create a new one with field “User” = ewhatyouwante and “Display name” = "myuseraccounttest"

4. Repeat the search for “myuseraccounttest”, this time you'll find the User Account

Expected Output

I expect to find my User Account if I search for a value contained in the text fields of my User Account, or at least in the mandatory fields.

Actual Output

The “Display name” field (which is not mandatory) is taken into account by search methods, but “User” and “Account login”, which are mandatory fields, are not (and perhaps others).