search

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
https://docs.intelmq.org/latest/
GNU Affero General Public License v3.0
963 stars 295 forks source link

User expandable harmonization #1315

Open navtej opened 6 years ago

navtej commented 6 years ago

Should we have user defined harmonization fields as an extension to existing fields? We can have a file user-harmonization.conf to define custom harmonization types and load those values along with standard values. This needs bit more thinking on storage and sharing of data aspects. Thoughts?

ghost commented 6 years ago

Yeah, in the next versions I want work on making intelmq more pluggable, see also #972 and others. So then bot's could also add their own required fields to the harmonization.

Idea: instead of having a single harmonization.conf use a harmonization.conf.d, where both other components/python packages and users can add their own files.

aaronkaplan commented 3 years ago

covered in the intelmq 3.0 architecture