Am Freitag 09 September 2016 12:55:17 schrieb Sebastian Wagner:
I think, that this is a wrong default. The default should be something which can be directly interpreted by IntelMQ: the flat structure.
From my perspective: I agree that there should be one format used everywhere in intelmq. flat sound good as this format, but I haven't checked. Flat may not cut it, if we have several entries or possible name collisions.
Bernhard