[IntelMQ-users] mail collector extra fields

Thomas Hungenberg th at cert-bund.de
Mon Jul 8 11:16:29 CEST 2024


Hello,

according to <https://github.com/certtools/intelmq/blob/develop/docs/user/bots.md>
events collected using a "Generic Mail URL Fetcher" should include this information:

     feed.url
     extra.email_date
     extra.email_subject
     extra.email_from
     extra.email_message_id
     extra.file_name

In our database, the events DO include feed.url but DO NOT include any of the extra fields.
Events collected using a "Generic Mail Attachment Fetcher" are missing the extra fields as well.

I wonder if this is a bug or caused by some configuration issue with our setup.


     - Thomas



More information about the IntelMQ-users mailing list