Hi,

On 2018-07-05 14:56, Salehi Ghamsari, Majid wrote:

I would like to put or change the IP runtime parameter of the TCP output bot “test-tcp-output” depends on Message that I get from file-collector in the runtime.
What is the best method to do this in intelmq?

Is the IP part of the message or is a mapping needed?

Are the IPs fixed and is the number of them small? Then you can use filters and different output bots, the explicit way.

Sebastian

-- 
// Sebastian Wagner <wagner@cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg