intelmq icon indicating copy to clipboard operation
intelmq copied to clipboard

Misp Expert - Crash if misp event already exist

Open RomainSm opened this issue 2 years ago • 1 comments

Hello,

We have an instance of intelMQ with MISP correlation. We ingest from MISP-collector (and a lot of other sources) data and we have an expert to correlate information from MISP in the case of data come from other sources.

Problem is : We have a crash of the MISP-Expert when an event come with the misp.event.uuid is not NULL/Empty.

This is something known or something you can fix ?

Thank in advance,

RomainSm avatar May 02 '22 11:05 RomainSm

What would be the expected behavior for you as a user? Skip the processing of such events?

sebix avatar Nov 29 '23 19:11 sebix