Métricas do repositório
- Stars
- (4.600 estrelas)
- Métricas de merge de PR
- (Mesclagem média 17d 10h) (50 fundiu PRs em 30d)
Description
| Questions | Answers |
|---|---|
| Type of issue | Support |
| OS version (server) | CentOS 7.7 |
| OS version (client) | CentOS 7.7 |
| Filebeat version | 7.7 |
| MISP version / git hash | MISP 2.4.127 |
Hi guys, i am trying to use MISP with the misp filebeat module, however i am getting error: Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.112+0300 ERROR [httpjson] httpjson/input.go:123 key not found {"url": "https://misp.localhost/attributes/restSearch"}
Making queries with curl is no problem and it works.
Filebeat config:
- module: misp threat: enabled: true var.api_key: "apikey" var.json_objects_array: "response.Attribute" var.url: "https://misp.localhost/attributes/restSearch" var.ssl: |- { verification_mode: none }
Journal:
Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.049+0300 INFO eslegclient/connection.go:84 elasticsearch url: http://elk.localhost:9200 Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.058+0300 INFO [esclientleg] eslegclient/connection.go:263 Attempting to connect to Elasticsearch version 7.6.2 Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.063+0300 INFO input/input.go:114 Starting input of type: httpjson; ID: 9999616162109598261 Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.063+0300 INFO cfgfile/reload.go:235 Loading of config files completed. Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.063+0300 INFO [httpjson] httpjson/input.go:118 httpjson input worker has started. {"url": "https://misp.localhost/attributes/restSearch"} Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.063+0300 WARN [tls] tlscommon/tls_config.go:83 SSL/TLS verifications disabled. Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.063+0300 WARN [tls] tlscommon/tls_config.go:83 SSL/TLS verifications disabled. Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.112+0300 ERROR [httpjson] httpjson/input.go:123 key not found {"url": "https://misp.localhost/attributes/restSearch"} Jun 23 14:03:07 misp.localhost filebeat[25521]: 2020-06-23T14:03:07.112+0300 INFO [httpjson] httpjson/input.go:124 httpjson input worker has stopped. {"url": "https://misp.localhost/attributes/restSearch"} Jun 23 14:03:10 misp.localhost filebeat[25521]: 2020-06-23T14:03:10.039+0300 INFO [add_cloud_metadata] add_cloud_metadata/add_cloud_metadata.go:89 add_cloud_metadata: hosting provider type not detected.