kx499-zz
kx499-zz
I had the same issue on 5.2 - resolved it by nuking the hippocampe index and starting over
I *think* the trick is to not create a default index in kibana until you run shadowbook and it completes. Honestly not sure though. Somehow the .kibana index and hippocampe...
Additionally, if you want to use visualizations in kibana you need to update field types for description for search, source, and dashboard types. here's the example for search. PUT /_all/_mapping/search?update_all_types...
curl -X DELETE "localhost:9200/hippocampe"
https://github.com/MISP/misp-warninglists/pull/96 Tackled it there, but had some questions about cidr and substring matches in the same list. The old one was set up that way and seemed to work so...
Whats the possibility we could get this merged in? Does it need any work or changes? Be happy to make it happen
Will do
That or 'mv feeder/feed.json.example feeder/feed.json' added to install steps/vagrant file.
Not using csrf protection provided by wtforms
I'm running into an issue where the IP's extracted (ipv4) include version strings and are not valid. I fixed this in code that calls cortex (external App) and basically filters...