Hi Soni,
https://github.com/certtools/intelmq/blob/master/intelmq/bots/outputs/misp/o...
Am Dienstag 11 Mai 2021 06:18:02 schrieb Soni, Drupad via IntelMQ-users:
How does MISP-API o/p bot work? I have gone through documentation shared on INTELMQ DOCUMENTATION.
the documentation points to the docstrings of the file for more details, thus see the docstring in https://github.com/certtools/intelmq/blob/master/intelmq/bots/outputs/misp/o... (or the right one for your version)
Once it is configured on Intelmq what configurations needs to be done on MISP integration side?
As far as I remember there are no special configuration settings needed in MISP. The Intelmq-misp-output-api bot will just enter new MSIP events (under the documented conditions) to the user with the configured MISP api key.
To see what is happening, check the logfile of the output_api bot (may need to raise logging levels as documented in the general IntelMQ documentation).
Regards, Bernhard