Error in ListenStream loop, exit, reason: Unterminated string starting at: line 1 column 507 (char 506)

[adriaanvermaak]

Hi team,

currently getting the below error with the new version of the App.

2025-02-14 14:42:38,925 INFO pid=3968813 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737983102995-0 - IronNet - identity--a6cc1350-8052-5089-bdcc-76c60ac9e68e
2025-02-14 14:42:39,133 ERROR pid=3968813 tid=MainThread file=base_modinput.py:log_error:309 | Error in ListenStream loop, exit, reason: Unterminated string starting at: line 1 column 507 (char 506)

I would like to include the creator_ids to the lookup, which i have added to the dictionary of the inputs script etc/apps/TA-opencti-add-on/bin/input_module_opencti_indicators.py under externsions function.

Also added to the collections.conf and also the lookup definitions.

Data starts to pull down then hits the ERROR.

please could you assist.
thank you
2025-02-14 14:32:06,694 INFO pid=3934561 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737980805056-0 - 101.42.51.12 - [ipv4-addr:value = '101.42.51.12']
2025-02-14 14:32:06,766 INFO pid=3934561 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737980805986-0 - 161.35.25.134 - [ipv4-addr:value = '161.35.25.134']
2025-02-14 14:32:06,832 INFO pid=3934561 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737980806086-0 - 167.172.58.134 - [ipv4-addr:value = '167.172.58.134']
2025-02-14 14:32:06,886 INFO pid=3934561 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737980806314-0 - 180.188.198.185 - [ipv4-addr:value = '180.188.198.185']
2025-02-14 14:32:06,948 INFO pid=3934561 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737980806583-0 - 35.212.172.98 - [ipv4-addr:value = '35.212.172.98']
2025-02-14 14:32:07,000 INFO pid=3934561 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737980806677-0 - 23.249.28.113 - [ipv4-addr:value = '23.249.28.113']
2025-02-14 14:32:07,186 INFO pid=3934561 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737982981738-0 - The MITRE Corporation - identity--f11b0831-e7e6-5214-9431-ccf054e53e94
2025-02-14 14:33:08,615 ERROR pid=3934561 tid=MainThread file=base_modinput.py:log_error:309 | Error in ListenStream loop, exit, reason: Unterminated string starting at: line 1 column 507 (char 506)
2025-02-14 14:33:10,324 INFO pid=3950781 tid=MainThread file=base_modinput.py:log_info:295 | OpenCTI data input module start
2025-02-14 14:33:10,325 INFO pid=3950781 tid=MainThread file=setup_util.py:log_info:117 | Proxy is not enabled!
2025-02-14 14:33:10,325 INFO pid=3950781 tid=MainThread file=base_modinput.py:log_info:295 | going to fetch data of OpenCTI stream.id: 91c2b1f5-11a0-4038-a06c-43b0b5d93b30
2025-02-14 14:33:10,336 INFO pid=3950781 tid=MainThread file=splunk_rest_client.py:_request_handler:99 | Use HTTP connection pooling
2025-02-14 14:33:10,372 INFO pid=3950781 tid=MainThread file=base_modinput.py:log_info:295 | checkpoint State: {"start_from": "1737983101903-0", "recover_until": "2025-02-14T12:27:56Z"}
2025-02-14 14:33:10,373 INFO pid=3950781 tid=MainThread file=base_modinput.py:log_info:295 | State: {'start_from': '1737983101903-0', 'recover_until': '2025-02-14T12:27:56Z'}
2025-02-14 14:33:10,636 INFO pid=3950781 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737983102995-0 - TLP:AMBER - marking-definition--f88d31f6-486f-44da-b317-01333bde0b82
2025-02-14 14:33:10,653 INFO pid=3950781 tid=MainThread file=base_modinput.py:log_info:295 | processing msg: create - 1737983102995-0 - IronNet - identity--a6cc1350-8052-5089-bdcc-76c60ac9e68e
2025-02-14 14:33:10,703 ERROR pid=3950781 tid=MainThread file=base_modinput.py:log_error:309 | Error in ListenStream loop, exit, reason: Unterminated string starting at: line 1 column 507 (char 506)
2025-02-14 14:33:55,239 INFO pid=3952014 tid=MainThread file=base_modinput.py:log_info:295 | OpenCTI data input module start
2025-02-14 14:33:55,240 INFO pid=3952014 tid=MainThread file=setup_util.py:log_info:117 | Proxy is not enabled!
2025-02-14 14:33:55,240 INFO pid=3952014 tid=MainThread file=base_modinput.py:log_info:295 | going to fetch data of OpenCTI stream.id: 91c2b1f5-11a0-4038-a06c-43b0b5d93b30

[adriaanvermaak]

Hi Romain,

just wanted to follow up here on this, as our Add-on is looping with this error continuously. therefore no ingestion of data from CTI.

thank you in advance

[romain-filigran]

Hi @adriaanvermaak : Sorry for the delay. Are you still dealing with this problem ?