remg427 / misp42splunk

A Splunk app to use MISP in background
GNU Lesser General Public License v3.0
109 stars 30 forks source link

Custom Galaxies not displaying in Splunk #259

Open SetecAstronomy86 opened 6 months ago

SetecAstronomy86 commented 6 months ago

We are having an issue where vendors/intel sources that create custom Galaxies in MISP are not displaying properly in Splunk. The galaxy will show in the "misp_tag" field but it will display the UUID instead of the actual name.