securityonion-misp icon indicating copy to clipboard operation
securityonion-misp copied to clipboard
verified publisher icon weslambert

MISP rules not getting added

Open Y3ll0wF1ash opened this issue 3 years ago • 1 comments

Hey Wes, I ran the script and in /opt/so/rules/nids/misp.rules, there are no rules present. Is there something that I am missing here?

Y3ll0wF1ash avatar Jun 15 '22 04:06 Y3ll0wF1ash

It's been a while since I've looked at this, so I'd have to test, but the first step I would take is to make sure authentication/connectivity to MISP is working like it should.

Are you able to manually authenticate/connect to your MISP instance from your Security Onion host?

weslambert avatar Jun 15 '22 17:06 weslambert