misp42splunk icon indicating copy to clipboard operation
misp42splunk copied to clipboard

Published 20 hours ago • verified publisher icon remg427

MISP42

Open ruzaj opened this issue 1 year ago • 2 comments

Dear Rami,

we are having problems with connecting MISP42 and Splunk. After putting data in configuration tab (misp istance, misp url, misp api key) we still cannot see MISP istance count, its 0. Can you please advise.

Thanks

ruzaj avatar Oct 17 '23 10:10 ruzaj

Hello,

Maybe the user cannot use splunk command rest which is the one populating the dashboards

You may try directly using misp_instance= to indicate which misp instance you want to use

remg427 avatar Oct 17 '23 12:10 remg427

Dear Remi,

thanks for quick answer. Splunk user can use every command. where do we use misp_instance = ?

ruzaj avatar Oct 17 '23 12:10 ruzaj