search

remg427 / misp42splunk

A Splunk app to use MISP in background
GNU Lesser General Public License v3.0
109 stars 30 forks source link

MISP42 #247

Open ruzaj opened 10 months ago

ruzaj commented 10 months ago

Dear Rami,

we are having problems with connecting MISP42 and Splunk. After putting data in configuration tab (misp istance, misp url, misp api key) we still cannot see MISP istance count, its 0. Can you please advise.

Thanks

remg427 commented 10 months ago

Hello,

Maybe the user cannot use splunk command rest which is the one populating the dashboards

You may try directly using misp_instance= to indicate which misp instance you want to use

ruzaj commented 10 months ago

Dear Remi,

thanks for quick answer. Splunk user can use every command. where do we use misp_instance = ?