Dates filter in playbooks list are not working

[SamuelHassine]

Description

Dates filter in playbooks list are not working

1. Go to the list of playbooks
2. Try to filter by modification date or creation date > 1 year

=> Nothing in the list

[Archidoit]

These filters are not working because Playbooks have no attributes 'creation date' and 'modification date' in elastic...

'creation date' and 'modification date' are not in Playbooks because not in the interface BasicObject in graphql. But they are defined in BasicObject registration attributes, thus their presence in playbooks filters (available filters are defined according to registration attributes files)....

Two solutions:

• add 'creation date' and 'modification date' in BasicObject graphql interface definition (functional consequence in this context: playbooks will have a creation and modification date)
• remove 'creation date' and 'modification date' from BasicObject registration attributes (functional consequence in this context: remove creation and modification date for playbook filters)

Notes

• In graphql, these attributes are defined at the StixObject level for the moment (so below the BasicObject level)
• These attributes are defined both in graphql and registration attribute for BasicRelationship.

An opinion on this ? @richard-julien @alice-debra @aHenryJard

[alice-debra]

I believe Option 1 is the better solution, as it provides valuable contextual information to users and resolves the inconsistency by making the filters fully functional. But it will impact all Playbooks with an additional creation/modification date.

[Archidoit]

@alice-debra yes ! And it will add this date to all the basic objects! What's more, already existing playbooks (basic object in general, so all the objects basically) won't have anything for creation and modification date...