Open edeca opened 6 years ago
Hello,
just stumbled upon the same problem. The only workaround I found is using a query which can never match but that's bad because it costs performance. Any better ideas?
Best solution would probably to issue a warning on empty iocs but not make it required.
The documentation says:
However, a report with removed IOCs does not validate:
The output from
validate_feed.py
is:Errors also occur if the
iocs
key is completely removed: