You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When configuring MISP instances in the misp section in TheHive's application.conf, the administrator can specify one or multiple tags that are added to cases when importing MISP events.
This setting is not honored.
Complementary information
Configuration Excerpt
# MISP
## Enable the MISP connector to import and/or export events.
play.modules.enabled += connectors.misp.MispConnector
misp {
"REBEL MISP" {
# URL of the MISP instance.
url = "http://misp"
# Authentication key.
key = "MYKEY"
# Name of the case template in TheHive that shall be used to import
# MISP events as cases by
# default.
caseTemplate = "MISP-EVENT"
# Tags to add when importing events.
tags = ["rebel-misp"]
# Truststore to use to validate the X.509 certificate of the MISP
# instance if the default
# truststore is not sufficient.
#ws.ssl.trustManager.stores = [
#{
# type: "JKS"
# path: "/path/to/truststore.jks"
#}
#]
}
# Interval between two MISP event synchronization.
interval = 1h
}
Tags Not Honored
According to the configuration excerpt above, TheHive must add the rebel-misp tag upon import. However, the tag does not appear as expected in the case:
The text was updated successfully, but these errors were encountered:
Request Type
Bug
Work Environment
Problem Description
When configuring MISP instances in the
misp
section in TheHive'sapplication.conf
, the administrator can specify one or multipletags
that are added to cases when importing MISP events.This setting is not honored.
Complementary information
Configuration Excerpt
Tags Not Honored
According to the configuration excerpt above, TheHive must add the
![screen shot 2017-11-14 at 07 37 01](https://user-images.githubusercontent.com/2852427/32766330-c3526884-c90e-11e7-957d-4cb12f4dd20c.png)
rebel-misp
tag upon import. However, the tag does not appear as expected in the case:The text was updated successfully, but these errors were encountered: