remg427 / misp42splunk

A Splunk app to use MISP in background
GNU Lesser General Public License v3.0
109 stars 30 forks source link

Document that no_ fields are for domain-ip objects #161

Closed creideiki closed 4 years ago

creideiki commented 4 years ago

MISP doesn't have an object type called "network", so referring to no fields as belonging to "network objects" is confusing. It does have "network-connection" and "network-socket" objects, but neither is created for no fields. The actual object type used is "domain-ip". Update the documentation to reflect this fact.