- When uploading a known good Yara Rule though the CB-Yara-Manager UI this error is received:
- This error is observed in the /var/log/cb/integrations/cb-yara-manager/cb-yara-manager.log with some variation based on the field name attempting to be loaded:
127.0.0.1 - - [21/Oct/2021 12:17:47] "[[33mGET /connector/yara/vendor/themes/default/assets/fonts/icons.ttf HTTP/1.1[[0m" 404 -
Traceback (most recent call last):
File "src/app/routes.py", line 71, in validate_yara_rule
yara.SyntaxError: /etc/cb/integrations/cb-yara-connector/yara_rules/<rule_name>.yar(104): invalid field name "<field_name>"
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "src/app/routes.py", line 198, in upload_rules
File "src/app/routes.py", line 73, in validate_yara_rule
AttributeError: 'SyntaxError' object has no attribute 'message'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "src/app/routes.py", line 204, in upload_rules
AttributeError: 'AttributeError' object has no attribute 'message'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "src/app/routes.py", line 60, in wrapped_f
File "src/app/routes.py", line 208, in upload_rules
AttributeError: 'AttributeError' object has no attribute 'message'