Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update default MISP docker-compose.yml to avoid confusion #3063

Merged
merged 2 commits into from
Dec 6, 2024
Merged

Update default MISP docker-compose.yml to avoid confusion #3063

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3678524
Update default MISP docker-compose.yml
romain-filigran Dec 3, 2024
293aa8d
update MISP sample config
romain-filigran Dec 6, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion external-import/misp/docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ services:
- MISP_ENFORCE_WARNING_LIST=false # Optional, enforce warning list in MISP queries
- MISP_REPORT_TYPE=misp-event # Optional, report_class if creating report for event
- MISP_IMPORT_FROM_DATE=2000-01-01 # Required, import all event from this date
- MISP_IMPORT_TAGS=opencti:import,type:osint # Optional, list of tags used for import events
- MISP_IMPORT_TAGS= # Optional, list of tags used to filter events to import
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @romain-filigran,
Can you also apply this change to the config.yml.sample file ?
I've also looked at the readme but it doesn't seem to be ambiguous.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You're right. config.yml.sample updated also.

- MISP_IMPORT_TAGS_NOT= # Optional, list of tags to not include
- MISP_IMPORT_CREATOR_ORGS= # Optional, only import events created by those orgs (put the identifiers here)
- MISP_IMPORT_CREATOR_ORGS_NOT= # Optional, do not import events created by those orgs (put the identifiers here)
Expand Down
6 changes: 3 additions & 3 deletions external-import/misp/src/config.yml.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,11 +34,11 @@ misp:
report_type: 'misp-event' # Optional, report_class if creating report for event
report_status: 'New' # New, In progress, Analyzed and Closed
import_from_date: '2010-01-01' # Optional, import all event from this date
import_tags: 'opencti:import,type:osint' # Optional, list of tags used for import events
import_tags: '' # Optional, list of tags used to filter events to import
import_tags_not: '' # Optional, list of tags to not include
import_creator_orgs: 'CIRCL,Luatix' # Optional, only import events created by those orgs (put the identifiers here)
import_creator_orgs: '' # Optional, only import events created by those orgs (put the identifiers here)
import_creator_orgs_not: '' # Optional, do not import events created by those orgs (put the identifiers here)
import_owner_orgs: 'CIRCL' # Optional, only import events owned by those orgs (put the identifiers here)
import_owner_orgs: '' # Optional, only import events owned by those orgs (put the identifiers here)
import_owner_orgs_not: '' # Optional, do not import events owned by those orgs (put the identifiers here)
import_owner_keyword: '' # Optional, search only events based on a keyword
import_distribution_levels: '0,1,2,3' # Optional, only import events with the given distribution levels
Expand Down