[Intelmq-users] ShadowServer Parser bot feedname

Sebastian Wagner wagner at cert.at
Thu Aug 2 14:49:26 CEST 2018


Hi,

On 2018-06-21 14:17, Peter Chan wrote:
> I currently have a directory of mixed feeds (Spam-URL, Open-mDNS,
> Open-LDAP etc.) that needs to be processed individually.
> Can the file-collector bot take regular expression in one of its
> parameters (feedname or postfix?) to filter which csv to queue to the
> appropriate shadowserver parser?

Not currently, but that is possible to implement.
First, the file collector would need regex-support. Then a match group
could be used as "parameter" for the sending step.
Second, the file collector would need to support queue paths, using the
match group of the file name to format the path.

Paths are a great new feature available in the to-be-released version
1.1.0 and in the development branch. See the docs here:
https://github.com/certtools/intelmq/blob/maintenance/docs/User-Guide.md#pipeline-configuration

Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20180802/73f79164/attachment.sig>


More information about the Intelmq-users mailing list