search

PaloAltoNetworks / minemeld

Main MineMeld documentation repo
380 stars 64 forks source link

Feeds for single IPs instead of ranges #20

Open cuongdinh opened 6 years ago

cuongdinh commented 6 years ago

Hello,

Does anyone have any suggestion creating output IP feeds that only contain lists of individual IP addresses instead of IP ranges.

For example: What I need: 123.10.10.1 123.10.10.2 124.11.11.6

Instead of: 123.10.10.1-123.10.10.2 124.11.11.6-124.11.11.6

The challenge is, some of our tools (Cisco TID) only ingests single IPs and not ranges.

Any advice is appreciated!

Thanks!

xhoms commented 6 years ago

Hi @cuongdinh,

I highly encourage you to use discussion board in https://live.paloaltonetworks.com/t5/MineMeld/ct-p/MineMeld for such sort of questions.

The document at https://live.paloaltonetworks.com/t5/MineMeld-Articles/Parameters-for-the-output-feeds/ta-p/146170 describes the available output format modifiers to the redisfeed output node.

I think that the modifier ?tr=1 will do the job for you.