LetMeR00t / TA-thehive-cortex

Technical add-on for Splunk related to TheHive/Cortex from TheHive project
GNU Lesser General Public License v3.0
47 stars 11 forks source link

[BUG] UC2: Columns are missing in screenshot #75

Closed kwizzz closed 9 months ago

kwizzz commented 10 months ago

Just a small nitpick: the columns cert-alerted-on and risk defined in SPL are missing in the next screenshots.

UC2 in alert_actions_and_adaptive_response.md

LetMeR00t commented 9 months ago

Hello @kwizzz , After a check, it seems that everything is right in the documentation, could you provide me a screenshot on where is the error you've seen ? Thank you

kwizzz commented 9 months ago

Blimey, you are right! I wasn´t aware that both, cert-alerted-on and risk, were defined as custom fields. I was so focused on the newly created table in the TheHive screenshot (where I did not find these fields) that I did not look down to the CF section. No bug, then. Sorry.