PyMISP
PyMISP copied to clipboard
Complex Build Query TAG parameter not working
Hello,
I am using PyMISP to pull data from our MISP instance. In this case I am using a 'search' command with complex query, that contains OR parameters for TAG applied to Events.
Here is a snippet where I perform this search and build the complex query:
tagQuery = misp.build_complex_query(
or_parameters = {
global,
country,
},
and_parameters = None,
not_parameters = None
)
return misp.search("events", event_tags = tagQuery, date_from = LAST_MONTH, includeEventTags=True, published=False)
Last time I ran this was last month and it worked. Today is no longer working, it seems to ALSO pull Events from MISP that do NOT have the specified 'Tags'. I only need the events with specified tags.
Is this an issue with some newer releases? Or am I missing an update?
EDIT:
I have found out that if i replace event_tags with tags in the misp.search it seems to work.