search

PaloAltoNetworks / minemeld-misp

MineMeld nodes for MISP
Apache License 2.0
18 stars 16 forks source link

Not able to create a node with event_attributes #6

Open knowtheunknown opened 6 years ago

knowtheunknown commented 6 years ago

Hi all! When I create a node assigned to a prototype that it use event_attributes, engine go into a fatal status when I try to compile it. Is it possible to add just a single event_attribute? Am I doing something wrong?

age_out:
    default: null
    sudden_death: true
attributes:
    confidence: 70
    share_leve: white
client_cert_required: false
event_attributes:
    uuid: XXXXXXX-XXXX-XXXX-XXXX-XXXXXXX
filters:
    published: 1
    tag: tlp:white
honour_ids_flag: true
indicator_types: IPv4
source_name: misp.name
url: https://<misp.url>
verify_cert: true

Thank's!

jtschichold commented 5 years ago

Hi @knowtheunknown, are you trying to attach a fixed attribute to all the indicators generated by the miner? Could you give me more details on what you are trying to accomplish?

Thanks!