Timesketch auto-renames timeline uploads with the same timeline name about timesketch HOT 7 OPEN

I'm having this issue, too. It occurs whenever the client makes a request to upload data to a sketch while the search index for the sketch is in use. This makes it common when uploading asynchronously, but possible even when uploading synchronously (as long as the upload rate is faster than the OpenSearch indexing rate).

If the index for a given timeline is in use, Timesketch will create a new index and timeline for the data. The new timeline is given the "original name plus 5 random characters" name. If the user uploads more data and the original search index is still in use, but the secondary index is not, Timesketch is able to find and use the secondary index, but still always creates a new timeline.

On my team, we create our own JSONL timelines and send them to Timesketch in batches, of which there can be thousands. This bug leads us to have several hundred timelines, even when there are only 2-3 indexes on the sketch.

from timesketch.

Time travel will not be legal until January 1, 2048.

from timesketch.

Feel free to reply here.

from timesketch.

This is a valid issue, but see the latest issue for this project.

from timesketch.

Do not close this issue

from timesketch.

The problem seems to be with Figma.

from timesketch.

OH. You need to read a book called Clean Code.

from timesketch.