Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

MISP Connector | 0 events have been processed

See original GitHub issue

Description

MISP Connector is running, but not importing any events.

Connector config.yml

Connector log tail:

INFO:root:Reporting work update_received opencti-work--89ce519a-f03e-421f-9a6d-bbbf5db87d58
INFO:root:Initiate work for 6b039104-178a-456d-97ea-e1d7ee6372b8
INFO:root:Connector last run: 2021-04-13 09:36:52
INFO:root:Fetching MISP events with args: {"tags": {"OR": ["*"]}, "null": 1618306612, "limit": 50, "page": 1}
INFO:root:MISP returned 0 events.
INFO:root:Connector successfully run (0 events have been processed), storing last_run as 1618306672
INFO:root:Reporting work update_received opencti-work--382342bb-f1cd-46e1-8037-d11be3ab331e

Environment

OS (where OpenCTI server runs): Ubuntu 18.04
OpenCTI version: 4.3.5
PyMISP: ver. 2.4.141.1

Attached resent log files.

202104_opencti-misp.zip

Regards, Khalid

Issue Analytics

State:
Created 2 years ago
Comments:7 (3 by maintainers)

Top GitHub Comments

1reaction

SamuelHassinecommented, Apr 14, 2021

Hello @khalidrehan,

Please juste let the “import_tags” empty if you want to import everything. Here you are importing events tagged with “*”.

Kind regards, Samuel

0reactions

khalidrehancommented, Apr 20, 2021

Hello @SamuelHassine

I hashed some optional filters, and the connector started to import events:

Regards, Khalid

Top Results From Across the Web

MISP Connector 0 Events Processed · Issue #725 - GitHub

I verified that MISP is returning JSON back as part of the request: image. But still getting "0 events have been processed" message....

External Connectors · User guide of MISP ... - CIRCL.lu

To run script, go to the root directory of misp-graph-script and enter PYTHONHASHSEED=0 python3 script.py in the command line. App Registration.

Micro Focus Security ArcSight Malware Information Sharing ...

The Model Import Connector for MISP. (Malware Information Sharing PlatformSolution)is a component which retrieves Threat Intelligence fromthe MISP (Open Source ...

misp-training.pdf

MISP is a threat information sharing platform that is free & open source software ... "We don't have time to process or contribute...

MISP event data - Product Documentation | ServiceNow

Initial: The analysis is just beginning; Ongoing: The analysis is in progress; Completed: The analysis is complete. Threat Level, This field ...