Some encountered issues

[davidcbbc]

Hey there , the following is a list I found some bugs / missing features i thought might be helpful sharing:

• The GET findings endpoint does not return any findings coming from the scans neither are inserted into the asset_store > assets collection. However, findings inserted manually are ok.
• There is no pagination on the results. This is obviously needed for big scopes.
• When listing scans, the Started , Finished and Duration fields are not being populated. (However in some rare cases they show up)
• The scan status are bugged. Many are long finished and still show as Running, for instance.
• Scan aborts result in the agent being marked OFFLINE.

Let me know if these make sense :) Keep up the good work!

[TheTechromancer]

@davidcbbc Thanks for reporting these.

Pagination is supported through the use of skip= and limit=. Endpoints that potentially return a lot of data, like events and assets, are also lazy loaded, meaning they can be consumed as needed without taking memory or CPU on the server.

The scan bugs are known and will be fixed soon; for now the best way is to run a scan manually and cat output.json | bbctl event ingest.