Hi, I’ve added the CyberThreatExchange opencti connector to my docker containers, but I’m getting an error once it’s up which means it just keeps restarting and won’t actually make any connections out to pull in IOCs etc from the feeds that I’ve chosen. I’m hoping someone can help give me a steer in case I’ve made a mess of adding it, or if there’s something else going on:
{“timestamp”: “2026-04-29T12:31:07.421444Z”, “level”: “ERROR”, “name”: “CyberThreatExchange”, “message”: “An unexpected error occurred during schedule”, “exc_info”: “Traceback (most recent call last):\n File “/usr/local/lib/python3.12/site-packages/pycti/connector/opencti_connector_helper.py”, line 3105, in schedule_process\n message_callback()\n File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 163, in run_once\n with self._run_in_work(“CyberThreatExchange Connector Run”):\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File “/usr/local/lib/python3.12/contextlib.py”, line 137, in enter\n return next(self.gen)\n ^^^^^^^^^^^^^^\n File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 148, in _run_in_work\n work_id = self.helper.api.work.initiate_work(self.helper.connect_id, work_name)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File “/usr/local/lib/python3.12/site-packages/pycti/api/opencti_api_work.py”, line 225, in initiate_work\n work = self.api.query(\n ^^^^^^^^^^^^^^^\n File “/usr/local/lib/python3.12/site-packages/pycti/api/opencti_api_client.py”, line 749, in query\n raise ValueError(value_error)\nValueError: {‘name’: ‘GRAPHQL_VALIDATION_FAILED’, ‘error_message’: ‘Unknown argument “isMultiPartWork” on field “Mutation.workAdd”.’}”, “attributes”: {“reason”: “{‘name’: ‘GRAPHQL_VALIDATION_FAILED’, ‘error_message’: ‘Unknown argument “isMultiPartWork” on field “Mutation.workAdd”.’}”}}
Terminated
In some news, now that I’ve updated to the latest platform version, I’ve got a new error:
[CyberThreatExchange] Work failed - Traceback (most recent call last): File “/usr/local/lib/python3.12/site-packages/requests/models.py”, line 978, in json return complexjson.loads(self.text, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File “/usr/local/lib/python3.12/site-packages/simplejson/_init_.py”, line 517, in loads return _default_decoder.decode(s) ^^^^^^^^^^^^^^^^^^^^^^^^^^ File “/usr/local/lib/python3.12/site-packages/simplejson/decoder.py”, line 396, in decode obj, end = self.raw_decode(s) ^^^^^^^^^^^^^^^^^^ File “/usr/local/lib/python3.12/site-packages/simplejson/decoder.py”, line 426, in raw_decode return self.scan_once(s, idx=_w(s, idx).end()) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ simplejson.errors.JSONDecodeError: Expecting value: line 1 column 1 (char 0) During handling of the above exception, another exception occurred: Traceback (most recent call last): File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 63, in list_subbed_feeds return self.retrieve(“v1/subscriptions/”, list_key=“results”) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 119, in retrieve for objects in self._retrieve(path, list_key, params): ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 103, in _retrieve data = resp.json() ^^^^^^^^^^^ File “/usr/local/lib/python3.12/site-packages/requests/models.py”, line 982, in json raise RequestsJSONDecodeError(e.msg, e.doc, e.pos) requests.exceptions.JSONDecodeError: Expecting value: line 1 column 1 (char 0) The above exception was the direct cause of the following exception: Traceback (most recent call last): File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 152, in _run_in_work yield work_id File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 164, in run_once self._run_once() File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 125, in _run_once for feed_data in self.list_subbed_feeds(): ^^^^^^^^^^^^^^^^^^^^^^^^ File “/opt/opencti-connector-dogesec-cyberthreatexchange/connector.py”, line 66, in list_subbed_feeds raise CTXException(“failed to fetch feeds”) from e CTXException: failed to fetch feeds