Threat Intel Problems

Elastic Stack Beats
1

I'm trying to know if my threatintel.yml is working right?
Because i'm trying to use misp on threat intel but is don't display anything but the other modules are displaying information, for example, the abuseURL.

misp:
enabled: true
var.input: httpjson
var.url:https://192.168.100.122/events/restSearch
var.api_token: 8qgv...ajlbD
var.ssl.verification_mode: none
var.first_interval: 120000h
var.interval: 10m

this is my configuration for misp

Any solution?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.