Benni0

In apaches misp.conf a rewrite map is defined which checks the key against cake: RewriteMap authkeys "prg:/var/www/MISP/app/Console/cake user authkey_valid" apache:apache If you execute the cake command inside the container you...

I would recommend to use a reverse proxy like Nginx or Traefik for TLS termination instead of terminate TLS directly in the MISP container. I also don't see the need...

Hi, that's not an issue of the docker container, it's an issue of MISP itself. The bug is already fixed [#9550](https://github.com/MISP/MISP/issues/9550#issue-2122500672). The fix will be released with the next MISP...

Did you import your custom root CA? https://github.com/NUKIB/misp/blob/main/docs/CUSTOMIZATION.md#add-custom-certificates

Maybe you have enabled one of the Abuse.ch feeds, which contain high correlating values. The MISP project implemented a new correlation engine in version 2.4.160 - please try to update...

You have to set the URL containing the hostname or the IP address of the host where MISP modules are running. If you use the provided docker compose file the...

@BlueValley190 it's a bug in MISP itself, I've created a pull request with a fix for it (#9893). If you don't want to wait till the pull request got merged...

I would recommend doing it the other way around. Import all required IOCs from MISP to Splunk, either in a lookup table or in an index and create a lookup...

@mdavis332 @adulau You can find my App here:[Splunk-App-for-MISP](https://github.com/Benni0/Splunk-App-for-MISP), and also on [Splunkbase](https://splunkbase.splunk.com/app/7536) Feedback is welcome!

I adapted a old version for rootless deployment on openshift some time ago: [openshift-compat)](https://github.com/Benni0/misp-docker/tree/openshift-compat) Maybe this can help to create a rootless container for the current release.