search

weslambert / securityonion-misp

GNU General Public License v3.0
34 stars 6 forks source link

MISP rules not getting added #8

Open Y3ll0wF1ash opened 2 years ago

Y3ll0wF1ash commented 2 years ago

Hey Wes, I ran the script and in /opt/so/rules/nids/misp.rules, there are no rules present. Is there something that I am missing here?

weslambert commented 2 years ago

It's been a while since I've looked at this, so I'd have to test, but the first step I would take is to make sure authentication/connectivity to MISP is working like it should.

Are you able to manually authenticate/connect to your MISP instance from your Security Onion host?