romainw

file logger: buffer still full despite "chan-buffer-size" changes

12

Many thanks for your time and effort with go-dnscollector! We are using go-dnscollector as part of the pDNSSOC project (https://github.com/CERN-CERT/pDNSSOC) We process incoming dnstap files for a number of resolvers...

No alert when MISP is timing out for correlation / enrichment

1

Launching a search query for a domain or IP on a MISP instance is resource intensive and often cause the query to timeout. Currently, pDNSSOC-cli stops processing the alert when...

It seems 'output_dir/matches.json' does not exist at least when creating a new instance, which is causing errors: ``` dnscollector_1 | Exception in thread Thread-8 (daemonized_correlate): dnscollector_1 | Traceback (most recent...

Last should use "timestamp" and not "published_timestamp"

1

Thanks a lot for this great Splunk app. For all practical purposes, it seems "last" should be matching the event's "timestamp" and not "published_timestamp". For example currently, if I setup...