search

MISP / misp-docker

A production ready Dockered MISP
GNU General Public License v3.0
159 stars 94 forks source link

Mounting docker volumes mounting backwards with correct path?? #179

Open EthanGoodman opened 7 hours ago

EthanGoodman commented 7 hours ago

Right now, I am trying to get an object template inside of the /var/www/MISP/app/files/misp-objects/objects directory. I decided to mount my object template with a docker volume inside of a docker compose file with this:

"/path/to/my/object-template:/var/www/MISP/app/files/misp-objects/objects/new-object-template"

This is not seeming to work and actually when I ran this: "/path/to/my/object-template:/var/www/MISP/app/files/misp-objects/objects", every folder in the objects directory mounted to my object template folder on my host machine. Not sure what is going on here, but I have about 8 object templates specific to my use that I need to get into MISP. Each object template I need is pretty similar, but different enough to need a different template. I have a feed pulling data from somewhere else and need these objects to contextualize the data.

ostefano commented 5 hours ago

As discussed on Gitter the issue of using MISP custom objects has nothing to do with the "inverted path" issue, and we should first focus on properly handling the former rather than looking at the symptom.

EthanGoodman commented 4 hours ago

Okay I see. So is there anything I should do?

ostefano commented 4 hours ago

Can you share the object template?

EthanGoodman commented 4 hours ago

This is one of them: { "description": "Names of every group/channel telegram analyzed", "meta-category": "misc", "name": "Group names", "uuid": "bf90a06a-5f3b-40af-96e1-0839512381d3", "version": 1, "attributes": { "group-name": { "description": "Name of one of the groups analyzed", "disable_correlation": true, "misp-attribute": "text" } } }

Sorry for the weird format I cant figure out why it wont keep indents