PyMISP icon indicating copy to clipboard operation
PyMISP copied to clipboard

Complex Build Query TAG parameter not working

Open roo7cause opened this issue 2 years ago • 0 comments

Hello,

I am using PyMISP to pull data from our MISP instance. In this case I am using a 'search' command with complex query, that contains OR parameters for TAG applied to Events.

Here is a snippet where I perform this search and build the complex query:

tagQuery = misp.build_complex_query(
        or_parameters  = {
            global,
            country,
        },
        and_parameters = None,
        not_parameters = None
        )

    return misp.search("events", event_tags = tagQuery, date_from = LAST_MONTH, includeEventTags=True, published=False)

Last time I ran this was last month and it worked. Today is no longer working, it seems to ALSO pull Events from MISP that do NOT have the specified 'Tags'. I only need the events with specified tags.

Is this an issue with some newer releases? Or am I missing an update?

EDIT: I have found out that if i replace event_tags with tags in the misp.search it seems to work.

roo7cause avatar Oct 03 '23 11:10 roo7cause