[IntelMQ-users] MISP Expert bot

[Bernhard Reiter]

Hi Soni,

https://github.com/certtools/intelmq/blob/master/intelmq/bots/outputs/misp/output_api.py

Am Dienstag 11 Mai 2021 06:18:02 schrieb Soni, Drupad via IntelMQ-users:
> How does MISP-API o/p bot work? I have gone through documentation shared on
> INTELMQ DOCUMENTATION.

the documentation points to the docstrings of the file for more details,
thus see the docstring in 
https://github.com/certtools/intelmq/blob/master/intelmq/bots/outputs/misp/output_api.py
(or the right one for your version)

> Once it is configured on Intelmq what configurations 
> needs to be done on MISP integration side? 

As far as I remember there are no special configuration settings needed in 
MISP. The Intelmq-misp-output-api bot will just enter new MSIP events 
(under the documented conditions) to the user with the configured MISP api 
key.

To see what is happening, check the logfile of the output_api bot (may need to 
raise logging levels as documented in the general IntelMQ documentation).

Regards,
Bernhard


-- 
www.intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210511/758f4ad0/attachment.sig>