You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Michael Miklavcic (JIRA)" <ji...@apache.org> on 2017/05/04 17:13:04 UTC
[jira] [Created] (METRON-929) UI - Unable to add new threat intel
enrichments
Michael Miklavcic created METRON-929:
----------------------------------------
Summary: UI - Unable to add new threat intel enrichments
Key: METRON-929
URL: https://issues.apache.org/jira/browse/METRON-929
Project: Metron
Issue Type: Bug
Reporter: Michael Miklavcic
New threat triage/enrichments don't show up in the UI as available enrichment options and there doesn't appear to be a way to add them yourself. The user must modify the JSON directly.
Working through the blog tutorial - https://cwiki.apache.org/confluence/display/METRON/2016/05/02/Metron+Tutorial+-+Fundamentals+Part+4%3A+Pluggable+Threat+Intelligence
I modified the loader step from the tutorial to run as just a threat intel/enrichment loader so that it doesn't add the enrichment config. I wanted to load the data into HBase but configure the sensor threat intel via the UI.
{code}${METRON_HOME}/bin/flatfile_loader.sh -i domainblocklist.csv -t threatintel -c t -e threatintel_extractor_config.json{code}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)