You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Michael Miklavcic (JIRA)" <ji...@apache.org> on 2017/05/04 17:13:04 UTC

[jira] [Created] (METRON-929) UI - Unable to add new threat intel enrichments

Michael Miklavcic created METRON-929:
----------------------------------------

             Summary: UI - Unable to add new threat intel enrichments
                 Key: METRON-929
                 URL: https://issues.apache.org/jira/browse/METRON-929
             Project: Metron
          Issue Type: Bug
            Reporter: Michael Miklavcic


New threat triage/enrichments don't show up in the UI as available enrichment options and there doesn't appear to be a way to add them yourself. The user must modify the JSON directly.

Working through the blog tutorial - https://cwiki.apache.org/confluence/display/METRON/2016/05/02/Metron+Tutorial+-+Fundamentals+Part+4%3A+Pluggable+Threat+Intelligence

I modified the loader step from the tutorial to run as just a threat intel/enrichment loader so that it doesn't add the enrichment config. I wanted to load the data into HBase but configure the sensor threat intel via the UI.
{code}${METRON_HOME}/bin/flatfile_loader.sh -i domainblocklist.csv -t threatintel -c t -e threatintel_extractor_config.json{code}





--
This message was sent by Atlassian JIRA
(v6.3.15#6346)