certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
https://docs.intelmq.org/latest/
GNU Affero General Public License v3.0
972 stars 295 forks source link

Allow sieve reuse data from the event #2486

Open kamil-certat opened 6 months ago

kamil-certat commented 6 months ago

Currently, only modify bot can access data from the event and set them back in other field. It would be useful to let Sieve bot do the same, e.g. to rewrite some fields.