Hi, everyone I have been testing with Filebeat Threat Intel module in order to get events from MISP. I have some doubts regarding configuration: I have to disable every input plugin because they are enabled by default. Should they be disabled by default ? From my point of view it would be a …

Just removed my older posts, as they would have been conflicting with the results. We ran some tests with and without the uuid setting for the filebeat module against our own misp setup and saw that the expected behavior did indeed happen, so this seems to be something specific to your setup: Belo…

Discuss the Elastic Stack

Doubts about Filebeat Threat Intel Module [7.12.0]

Elastic Stack Beats

Topic		Replies	Views
Filebeat Threat Intel Module Errors Beats painless , beats-module , filebeat , ingest-pipeline	3	813	December 17, 2022
MISP and Elastic Security Elastic Security	16	2092	November 4, 2022
Filebeat + elasticsearch make duplicates events Beats filebeat	20	3277	December 4, 2018
Bug: No Misp event data send to Kibana when Threat intel module used Beats beats-module , filebeat	6	1070	April 19, 2023
Filebeat Threat Intel module, multiple Anomali filesets Beats filebeat	8	545	March 21, 2022

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Doubts about Filebeat Threat Intel Module [7.12.0]

Related topics