[Intelmq-dev] changing bot runtime parameter

Sebastian Wagner wagner at cert.at
Thu Jul 5 16:09:44 CEST 2018


Hi,

On 2018-07-05 14:56, Salehi Ghamsari, Majid wrote:
> I would like to put or change the IP runtime parameter of the TCP
> output bot “test-tcp-output” depends on Message that I get from
> file-collector in the runtime.
>
> What is the best method to do this in intelmq?
>

Is the IP part of the message or is a mapping needed?

Are the IPs fixed and is the number of them small? Then you can use
filters and different output bots, the explicit way.

Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20180705/e2b8c307/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20180705/e2b8c307/attachment.sig>


More information about the Intelmq-dev mailing list