Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] max-attributes param not working for MISP #2050

Closed
mamoedo opened this issue Jun 1, 2021 · 2 comments
Closed

[Bug] max-attributes param not working for MISP #2050

mamoedo opened this issue Jun 1, 2021 · 2 comments
Assignees
Labels
bug TheHive4 TheHive4 related issues
Milestone

Comments

@mamoedo
Copy link

mamoedo commented Jun 1, 2021

Request Type

Bug

Work Environment

Question Answer
TheHive version / git hash 4.1.4
Package Type Binary
Database Cassandra
Index type Elasticsearch
Attachments storage Local

Problem Description

At least max-attributes config setting is not working as stated here.

Steps to Reproduce

  1. Wait until you receive a MISP alert with more than max-attributes setting.
  2. Filter didn't work

Complementary information

{
            name = "Org"
            url = "https://misp.org.com"
            auth {
                type = key
                key = "XXXX"
            }
            purpose = ImportAndExport
            tags = ["Imported"]
            max-attributes = 2000
            max-size = 16 MiB
            max-age = 30 days
            exclusion {
              organisations = ["Org-two"]
            }
            includedTheHiveOrganisations = ["Org"]
        },
@mamoedo mamoedo added TheHive4 TheHive4 related issues bug labels Jun 1, 2021
@nadouani
Copy link
Contributor

nadouani commented Jun 2, 2021

@To-om it looks like max-attributes and max-size are not implemented in TheHive 4, can you please confirm?

vdebergue added a commit to vdebergue/TheHive that referenced this issue Jun 2, 2021
@To-om To-om added this to the 4.1.5 milestone Jun 3, 2021
To-om added a commit that referenced this issue Jun 3, 2021
Fix #2050: add max-attributes to misp filters
@To-om To-om closed this as completed Jun 3, 2021
@Shraddha10rathor
Copy link

max-attributes filter is not working in TheHive version 4.1.9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug TheHive4 TheHive4 related issues
Projects
None yet
Development

No branches or pull requests

4 participants