Closed
Description
Work Environment
Name | Version |
---|---|
MISP | 2.4.136 |
TheHive | 4.0.4-1 |
Problem Description
Hi, I have problem with MISP and TheHive. Export case from TheHive to MISP works. When I published event on MISP, TheHive get nothing.
Note: Event is published to All communities (on MISP side) so it should works.
Configuration
play.modules.enabled += org.thp.thehive.connector.misp.MispModule
misp {
interval: 5m
servers: [
{
name = "MISP" # MISP name
url = "https://x.x.x.x" # URL or MISP
auth {
type = key
key = "API"
}
wsConfig {}
caseTemplate = "MISP-EVENT"
tags = ["MISP"]
}
]
}
LOGS FROM apache2
File -> misp.local_access.log
The only log from a MISP is getting version by TheHive
x.x.x.x - - [25/Jan/2021:10:13:24 +0100] "GET /servers/getVersion HTTP/1.1" 200 805 "-" "AHC/2.1"