remg427 / misp42splunk

A Splunk app to use MISP in background
GNU Lesser General Public License v3.0
109 stars 30 forks source link

Problem with search #265

Open julbo250 opened 2 months ago

julbo250 commented 2 months ago

Hi, When i get IOC with the command : | mispgetioc misp_instance=MISP_xxxx last="1d" I obtain this error on Splunk :

[MC503] DEBUG urlib3 POST request failed error=[Errno 13] Permission denied url=https://xxxx/attributes/restSearch body={'last': '1d', 'returnFormat': 'json', 'withAttachments': False, 'includeEventUuid': True, 'deleted': False, 'page': 1, 'limit': 1000}

My MISP instance in on TLS1.3.

Is it possible to fix this problem ?