Skip to content

[Bug] TheHive -> MISP works. MISP -> TheHive not. #1761

Closed
@WingerHusar

Description

@WingerHusar

Work Environment

Name Version
MISP 2.4.136
TheHive 4.0.4-1

Problem Description

Hi, I have problem with MISP and TheHive. Export case from TheHive to MISP works. When I published event on MISP, TheHive get nothing.

Note: Event is published to All communities (on MISP side) so it should works.

Configuration

play.modules.enabled += org.thp.thehive.connector.misp.MispModule

misp {
interval: 5m
servers: [
{
name = "MISP" # MISP name
url = "https://x.x.x.x" # URL or MISP
auth {
type = key
key = "API"
}
wsConfig {}
caseTemplate = "MISP-EVENT"
tags = ["MISP"]
}
]
}

LOGS FROM apache2

File -> misp.local_access.log

The only log from a MISP is getting version by TheHive

x.x.x.x - - [25/Jan/2021:10:13:24 +0100] "GET /servers/getVersion HTTP/1.1" 200 805 "-" "AHC/2.1"

Metadata

Metadata

Assignees

Labels

TheHive4TheHive4 related issuesbug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions