<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Dear Jonathan, dear Mika,</p>
<p>On 12/17/21 1:12 PM, Jonathan SCOUPREMAN via IntelMQ-users wrote:<br>
> Could you please tell me the difference? Unfortunately, I was
not able to find hints in the current documentation.<br>
</p>
<p>Yeah, that part is missing in the docs, it was only part of (my)
presentations/workshops. Needless to say: PRs for the Docs and
other contributions are always welcome :)<br>
</p>
<p>> Also, as I see «report», does that mean IntelMQ has a
reporting capability ? As far as I know IntelMQ doesn’t provide a
reporting capability, hence my doubt. 😊</p>
<p>Depends very much on your understand of reporting.<br>
</p>
<div class="moz-cite-prefix">On 12/17/21 3:17 PM, Mika Silander
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1078964989.10213232.1639750656395.JavaMail.zimbra@csc.fi">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="font-family: arial, helvetica, sans-serif; font-size:
10pt; color: #000000"> I'll stop here in the hope the above
helps. More seasoned developers may continue from hereon (and
correct me along the way if necessary).</div>
</blockquote>
<p>Excellent answer, haven't found anything to correct ;)</p>
<p>Small additions for context:</p>
<p>The report contains just raw data fetched from the source, plus
some metadata of the collection process which may be needed or
useful afterwards.</p>
<p>In IntelMQ 3.0 we have renamed the "Data Harmonization Ontology"
to "IntelMQ/Internal Data Format" (IDF). The choice to name the
data format "Harmonization" comes from the fact that, in the
beginnings of IntelMQ back in 2015, Thomas Lima harmonized
different format that were out there, most importantly AbuseHelper
and ElasticSearch's ECS. The file name harmonization.conf is just
a leftover from the recent renaming, which we intentionally left
as is to minimize the migration burden and wait for other
potential refactorings in this area (e.g. moving the file
elsewhere, changing the format, completely obsolete it, ...
whatever).</p>
<p>Sebastian</p>
</body>
</html>