Hi,
I ran into this error:
Shadowserver-Compromised-Website-Parser - ERROR - Could not convert
shadowkey: 'http_host', value: '' via conversion function 'validate_fqdn'.
More detailed log is attached.
This happens when "http_host" field in the shadowserver origin report
contains IP instead of domain which is not something unusual.
At the end IntelMQ does produce the output data, but there's no
'source.url' field which should contain merged 'http_host' and 'url'
parameters from the origin report.
Regards,
--
Tomislav