PaloAltoNetworks / minemeld-misp

MineMeld nodes for MISP
Apache License 2.0
18 stars 16 forks source link

Minemeld - Configure aging in MISP integration #22

Open Tyrell20 opened 4 years ago

Tyrell20 commented 4 years ago

Describe the bug

Hello,

I set up and configured MISP node in Minemeld.

From MISP instance Minemeld is able to pull indicators without error.

Analyzing the log of these indicators I noticed that the parameters first_seen and lasts_seen belong to the feeds list instead that to the indicators itself

This is an issue in order to manage the aging of indicator.

Is it a know issue? Many thanks for the support

Expected behavior

Parameters first_seen and last_seend belong to the indicators itself and not to the MISP feeds

Current behavior

The old indicators stay in Minemeld because the feeds list are updated

Your Environment

welcome[bot] commented 4 years ago

:tada: Thanks for opening your first issue here! Welcome to the community!