Synapse not functional with TheHive4

[marpoe]

The String(query_string) https://thehive-project.github.io/TheHive4py/reference/query/#thehive4py.query.StartsWith) is not supported in TheHive4, but used in

"query['_string'] = 'description:"{}"'.format(string)" in "TheHiveConnector.py"

Fix-Recommendation:
Delete: "query['_string'] = 'description:"{}"'.format(string)
and add e.g.: query = ContainsString('description', format(string))

As well, the hard coded user "synapse" has to be changed. In TheHive 4 the users needs to be created in e-mail format, e.g. synapse@test.com --> for this change the users to your created synapse-user in

1. TheHiveConnector --> def craftCommTask(self): --> owner ='<-thehive4-user.'
2. EWS2Case --> connectEWS --> assignee = '-thehive4-user.'

Related to TheHive4 and Synapse

[blainedw]

I updated the code to use the ContainsString recommendation above but it doesn't seem to do matches on the conversation ID. Has anyone else seen this?

[blainedw]

Here is the snippet of code I changed in TheHiveConnector.py to make it work instead of ContainsString:

    query = Like('description', 'conversation_id: \"' + format(string) + '*')

I also reordered the output in the description field so that the conversation id comes first and the static message about case creation by synapse is last.