All,
we would like to use OTX and we already have a key from alienvault.
Our graylog server can not connect directly to the internet, we have to use a proxy to do so.
So, we set up the proxy in server.conf:
http_proxy_uri = :3128
This is only for connections to the internet, we do not need a proxy to reach our graylog system from the intranet.
OTX would be a HTTPS connection, is there also a config in Graylog to set https proxy?
Also, we set the proxy for java:
-Dhttps.proxyHost= -Dhttps.proxyPort=3128
Also, we set the proxy on the console to check with curl. Looks good.
But in graylog webui, i can not see that the connection to OTX works.If we test at data adapters for lookup tables, we receive the following message:
{
“single_value”: null,
“multi_value”: null,
“ttl”: 9223372036854776000,
“empty”: true
}
Well, totaly new in graylog, maybe we have missed or did not understand something.