How to test Threat Intelligence?

Graylog Central (peer support)
1

I do enabled Threat Intelligence. Setting pipelines and setting Open Thread Exchange (OTX) using API.

How can I test threats Intelligence is working ?

2018-12-21%2015_41_53-Graylog%20-%20Configurations

2018-12-21%2015_42_19-Graylog%20-%20Pipeline%20Threat%20Intelligence%20Lockups
2018-12-21 15_42_19-Graylog - Pipeline Threat Intelligence Lockups.png804×655 43.9 KB
2018-12-21%2015_42_37-Graylog%20-%20Lookup%20Tables
2018-12-21 15_42_37-Graylog - Lookup Tables.png1054×556 76.3 KB
2018-12-21%2015_43_12-Graylog%20-%20Lookup%20Tables%20-%20Data%20Adapters 2018-12-21%2015_43_21-OTX%20DirectConnect%20API%20-%20AlienVault%20-%20Open%20Threat%20Exchange

2

I found solution . Go to menu " Data adapters for Lookup Tables"
And Delete value in " HTTP User-Agent"

Gray
Gray.png734×408 15.9 KB

And then API is connected
2018-12-26%2014_57_27-OTX%20DirectConnect%20API%20-%20AlienVault%20-%20Open%20Threat%20Exchange

1 Like
3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.