any hints of how i can get the values from csv or dsv lookup
since i cant add more than one value in setup ? i want to lookup on ip key collum and get the answer on all values
“ip”,“Description”,“Date”,“classification”
“116.111.34.187”,“Malspam (2016-04-26) - Dridex botnet 122”,“2016-04-26”,tlp:white"
The best way would be probably to concatenate all values to one key like separated e.g. by ;
“ip”,“All”
“116.111.34.187”,“Malspam (2016-04-26) - Dridex botnet 122;2016-04-26;tlp:white"
And then use split(";") pipeline function to extract values from it.
yes thats a good idea thanks
im also trying to test to see if i can use the httpjson to work against MISP so i can do the loookup on ip or url/domain and enrich it that way to…
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.