search

misje / opencti-wazuh-connector

OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings
https://misje.github.io/opencti-wazuh-connector/
Apache License 2.0
10 stars 1 forks source link

Add a link to the search query in enrichment summary #68

Open misje opened 4 days ago

misje commented 4 days ago

This would have been done already if I had found a way to produce such a link in OpenSearch.

misje commented 3 days ago

This should work by creating a rison-encoded URL with the query. However, Wazuh doesn't even load shared snaphost links created from within Wazuh. This must be a bug.

misje commented 3 days ago

Related: https://github.com/wazuh/wazuh/issues/24246, which refers to https://github.com/opensearch-project/OpenSearch-Dashboards/issues/5248. Wait for a dashboard upgrade.