[IntelMQ-users] Parameters for file-collectors

[Henrik Jensen - TeleDCIS]

Hi Sebastian,



Thanks for your quick answer.



I do as you described, when I then run the CLI command "intelmqctl check", the system tells me the following: "Bot 'File-Collector' has no 'name'.", what does that mean then?



Bedste hilsner/regards



Henrik Jensen

TeleDCIS

Tlf: +45 35 88 82 84

Mobil: +45 93 51 00 03

Mail: hj at teledcis.dk<mailto:hj at teledcis.dk>

www.teledcis.dk







From: Sebastian Wagner <wagner at cert.at>
Sent: 25. januar 2021 17:09
To: Henrik Jensen - TeleDCIS <hj at teledcis.dk>
Cc: intelmq-users at lists.cert.at
Subject: Re: [IntelMQ-users] Parameters for file-collectors



Hi Henrik,

On 1/25/21 2:43 PM, Henrik Jensen - TeleDCIS wrote:

   I'm new to IntelMQ. But nevertheless I'm wondering how you are getting IntelMQ to use files uploaded in a directory. My only knowledge of IntelMQ Is using the GUI I'm not a scripting guy at all.



   Could someone in this community please help with setting the right parameters for the "file-collector2 bot in the GUI of IntelMQ?

   To add a bot to the configuration, either drag it from the list of available bots on the left to the desired place into the graph, or - alternatively - click "Add Bot", select a destination position in the graph and then on the left the bot you want to add.

   In any way, you'll get an interface to configure the parameters. You get the same interface when you edit an existing bot (select the bot and click "Edit Bot", or double-click the bot).

   Look at the section "runtime". As "path" enter the directory where the bot should expect the files. "postfix" is the file ending (could also be an empty string/null). That's the bare minimum. "rate_limit" is the time in seconds, the bot is sleeping between the runs, adjust it to your needs. "delete_file" determines if the file should be deleted after it has been picked by.

   The documentation on this bot can be found here: https://intelmq.readthedocs.io/en/latest/user/bots.html#fileinput

   best regards
   Sebastian

--
// Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210126/8cd48435/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 5623 bytes
Desc: image003.jpg
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210126/8cd48435/attachment.jpg>