-
Notifications
You must be signed in to change notification settings - Fork 50
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
FIND will not recreate variable but append #207
Comments
This is caused by prefetch + the non-deterministic process id. Prefetch will query the original data source, e.g., the stix-bundle in this case. The prefetch query will load the bundle again. Without a way to deterministically generate process id, all records will be reloaded as different records in firepit Will postpone the fix until we have better process id generation, which is not easy. For static stix bundle, it is feasible, but for stix-shifter created results, the observation id is different for each query though the results could point to the same. we need better support from stix-shifter to handle it. |
Describe the bug
When executing the FIND command on the same return variable, the variable is not recreated, but outputs are appended.
Details of the bug
FIND
command, when executing multiple times, will getp
to be larger and larger.To Reproduce
Steps to reproduce the behavior:
Expected behavior
p
should not change even theFIND
command has been executed multiple times.Environment (please complete the following information):
The text was updated successfully, but these errors were encountered: