search

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
https://docs.intelmq.org/latest/
GNU Affero General Public License v3.0
977 stars 297 forks source link

Runtime config: get default basic fields from bot's module #2431

Open kamil-certat opened 1 year ago

kamil-certat commented 1 year ago

Background

Managing 100+ bots from IntelMQ Manager is quite hard and as with any things at certain growing point, the UI just isn't enough. So I generate runtime.yaml from easier-to-handle configuration and templates.

Feature request

Every bot has a number of standard fields (group, type, description, name) that are almost every time the same. While it's nice being able to overwrite them, copying them to every bot is just an additional overhead. At the moment, leaving any of them empty, will kill IntelMQ or at least trigger check errors. I'd suggest that IntelMQ just takes the default values from bot's module instead, as with normal parameters.

gethvi commented 9 months ago

Also we could remove the nagging for not filling in the bot's name and description...