MISP/MISP

No events despite completed jobs and operation workers

Aperta

#6649 aperta il 25 nov 2020

 (7 commenti) (0 reazioni) (0 assegnatari)PHP (1306 fork)batch import
T: supporthelp wanted

Metriche repository

Star
 (4600 stelle)
Metriche merge PR
 (Merge medio 17g 10h) (50 PR mergiate in 30 g)

Descrizione

Morning Team,

Just wanted to check in and see if I was missing anything. Followed the instructions on this MISP video - https://www.youtube.com/watch?v=sWUCtetdLck. Having problems with event ingestion despite successful pulling of feed data.

Im Running on Ubuntu 18.04 / MISP 2.4.114.

Had to restart the workers on the box using after the instance was terminated. Used the command "sudo -u www-data /var/www/MISP/app/Console/worker/start.sh" We have this currently running in our AWS environment.

Could then see the workers become active in the web console and start working on fetching feeds. I left this to run overnight last night and still cannot see any events when I use the list events function this morning. All jobs completed without errors. Feel as if I could be missing something obvious? Used the "fetch and store all feed data" button. Feeds are enabled with a tick denoted on the column.

As the instance has rebooted, do I need to run any kind of update or get commands?

Would also be keen to understand recommended connections to external organisations? FSISAC for example?

Any help would be greatly appreiciated.

Thanks

Guida contributor