Hi Henrik,
On 1/25/21 2:43 PM, Henrik Jensen - TeleDCIS wrote:
I’m new to IntelMQ. But nevertheless I’m wondering how you are getting IntelMQ to use files uploaded in a directory. My only knowledge of IntelMQ Is using the GUI I’m not a scripting guy at all.
Could someone in this community please help with setting the right parameters for the “file-collector2 bot in the GUI of IntelMQ?
To add a bot to the configuration, either drag it from the list of available bots on the left to the desired place into the graph, or - alternatively - click "Add Bot", select a destination position in the graph and then on the left the bot you want to add.
In any way, you'll get an interface to configure the parameters. You get the same interface when you edit an existing bot (select the bot and click "Edit Bot", or double-click the bot).
Look at the section "runtime". As "path" enter the directory where the bot should expect the files. "postfix" is the file ending (could also be an empty string/null). That's the bare minimum. "rate_limit" is the time in seconds, the bot is sleeping between the runs, adjust it to your needs. "delete_file" determines if the file should be deleted after it has been picked by.
The documentation on this bot can be found here: https://intelmq.readthedocs.io/en/latest/user/bots.html#fileinput
best regards Sebastian