ELK 7.10 - Indicator index patterns: Value lists

[Frank_Hassanabad]

Currently there is a lot of different ways to set it up. In short, yes, you do need to create and setup an indicator index pattern. We do have file beat which can help out with regards to MISP feeds and modules. There's some caveats such as duplication you have to be careful of as outlined here:

MISP and Elastic Security

Hello @Ameer_Mukadam, sorry for the slow response, its in the middle of these busy Christmas times Let me talk about a few different pointers, so that you have a few choices on which approach you want to go. In terms of tweaking the MISP module, there is some known comments, requests and reports around the module which I am currently working on and while we cannot talk about in which release this might come up, I wanted to at least clarify it is a known case. Now in terms of fi…