intelmq
intelmq copied to clipboard
Misp Expert - Crash if misp event already exist
Hello,
We have an instance of intelMQ with MISP correlation. We ingest from MISP-collector (and a lot of other sources) data and we have an expert to correlate information from MISP in the case of data come from other sources.
Problem is : We have a crash of the MISP-Expert when an event come with the misp.event.uuid is not NULL/Empty.
This is something known or something you can fix ?
Thank in advance,
What would be the expected behavior for you as a user? Skip the processing of such events?