remg427 / misp42splunk

A Splunk app to use MISP in background
GNU Lesser General Public License v3.0
109 stars 30 forks source link

Issue No such file or directory in search "|mispgetioc last=30d type="yyy" misp_instance=XXXX" #258

Open spiazzi opened 7 months ago

spiazzi commented 7 months ago

Hi all,

we receive this error if we do this query (masked):

|mispgetioc last=30d type="yyy" misp_instance=XXXX

No such file or directory url=https://misp.xxx.xx/attributes/restSearch body={'last': '30d', 'returnFormat': 'json', 'withAttachments': False, 'includeEventUuid': True, 'deleted': False, 'type': 'yyy', 'page': 1, 'limit': 1000}

What we can check? Misp instance seems synced and authenticated on the other side.

remg427 commented 7 months ago

Hi

Which version of misp42 do you use? On linux or windows box?

spiazzi commented 7 months ago

Linux

spiazzi commented 6 months ago

any idea?