You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
The Content Updater fails, as it indexes fields not present in the wazuh-cve mappings. In particular, the context field.
[2025-05-19T14:39:05,768][DEBUG][c.w.c.c.CTIClient ] [node-2] [/catalog/contexts/vd_1.0.0/consumers/vd_4.8.0/changes] replied with status [200]
[2025-05-19T14:39:05,815][DEBUG][c.w.c.u.ContentUpdater ] [node-2] Fetched offsets from 1950913 to 1951913
[2025-05-19T14:39:05,816][INFO ][c.w.c.i.ContentIndex ] [node-2] Patching [wazuh-cve] from offset [1950914] to [1951913]
[2025-05-19T14:39:05,816][DEBUG][c.w.c.i.ContentIndex ] [node-2] Processing offset [1950914]
[2025-05-19T14:39:05,817][DEBUG][c.w.c.i.ContentIndex ] [node-2] Updating resource with ID [CVE-2022-49011]
[2025-05-19T14:39:05,887][ERROR][c.w.c.i.ContentIndex ] [node-2] Failed to patch [CVE-2022-49011] due to StrictDynamicMappingException[mapping set to strict, dynamic introduction of [context] within [_doc] is not allowed]
[2025-05-19T14:39:05,887][ERROR][c.w.c.u.ContentUpdater ] [node-2] Updated finally failed on offset [1950913]
To Reproduce
Steps to reproduce the behavior:
[Prerequisite] Set up an Indexer with the wazuh-cve index initialized.
AlexRuiz7
changed the title
[BUG] The Content Updater fails, as it indexes fields not present in the wazuh-cve mappings
[BUG] Content updater fails due to StrictDynamicMappingExceptionMay 19, 2025
AlexRuiz7
changed the title
[BUG] Content updater fails due to StrictDynamicMappingException
[BUG] Content update fails due to StrictDynamicMappingExceptionMay 19, 2025
AlexRuiz7
changed the title
[BUG] Content update fails due to StrictDynamicMappingException
Content update fails due to StrictDynamicMappingExceptionMay 19, 2025
Uh oh!
There was an error while loading. Please reload this page.
Describe the bug
The Content Updater fails, as it indexes fields not present in the
wazuh-cve
mappings. In particular, thecontext
field.To Reproduce
Steps to reproduce the behavior:
wazuh-cve
index initialized.Expected behavior
The Content Manager correctly applies JSON Patch operations to the content, persisting it in the index.
Plugins
Content Manager.
Additional context
Command to change the offset.
CTI consumer changes data
https://cti.wazuh.com/api/v1/catalog/contexts/vd_1.0.0/consumers/vd_4.8.0/changes?from_offset=1950910&to_offset=1950913&with_empties=true
CTI documentation
https://github.com/wazuh/cti/blob/main/docs/ref/catalog.md#fetching-consumer-changes
Sample of CVE data being indexed
The text was updated successfully, but these errors were encountered: