scm migrator fails with "ERROR: duplicate key value violates unique constraint"

Products

• Security Analytics

Issue/Introduction

scm migrator is a tool that can be used to migrate indicators from one appliance to another.  It may fail if there are existing values on the appliance.

Cause

The "non-standard SSH" indicator fails to import with an error that it already exists.

Error seen on the CLI:

Error: SQLSTATE[23505]: Unique violation: 7 ERROR: duplicate key value violates unique constraint "deepsee_favorites_hash_uuid"
DETAIL: Key (hash_uuid)=(79bb1cc9-4a1e-80e2-1d46-19dd19c145ae) already exists.

Resolution

1- Use Backup/Restore via the web GUI to backup the configuration including indicators and restore it to your second appliance.  See the following documentation on how to perform these steps:  
Backup and Restore

2- Contact technical support to delete the duplicated row.