[IntelMQ-users] Parameters for file-collectors

[Sebastian Wagner]

Hi Henrik,

On 1/25/21 2:43 PM, Henrik Jensen - TeleDCIS wrote:
>
> I’m new to IntelMQ. But nevertheless I’m wondering how you are getting
> IntelMQ to use files uploaded in a directory. My only knowledge of
> IntelMQ Is using the GUI I’m not a scripting guy at all.
>
>  
>
> Could someone in this community please help with setting the right
> parameters for the “file-collector2 bot in the GUI of IntelMQ?
>
To add a bot to the configuration, either drag it from the list of
available bots on the left to the desired place into the graph, or -
alternatively - click "Add Bot", select a destination position in the
graph and then on the left the bot you want to add.

In any way, you'll get an interface to configure the parameters. You get
the same interface when you edit an existing bot (select the bot and
click "Edit Bot", or double-click the bot).

Look at the section "runtime". As "path" enter the directory where the
bot should expect the files. "postfix" is the file ending (could also be
an empty string/null). That's the bare minimum. "rate_limit" is the time
in seconds, the bot is sleeping between the runs, adjust it to your
needs. "delete_file" determines if the file should be deleted after it
has been picked by.

The documentation on this bot can be found here:
https://intelmq.readthedocs.io/en/latest/user/bots.html#fileinput

best regards
Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210125/f5333a0b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210125/f5333a0b/attachment.sig>