If required, drop the certificate for accessing the TAXII server into this field. Enter the password for accessing the TAXII server. Enter the username for accessing the TAXII server. As required, an subscription ID to send to the TAXII provider in the poll request. (The collections available depend on your threat intel provider.) If you leave this field blank, all indicators will be queried.) You can optionally enter a comma-separated list of the specific collections of indicators that you want to retrieve. I am trying to integrate AlienVaults OTX. Note that on subsequent updates, CSE will only consider data added to the feed since the last time it was polled. I am trying to integrate AlienVaults OTX TAXII feed as a data connector, and I keep getting unexpected errors. By default, the first time you populate the list, CSE will look for all data from the feed for all time. You can use this option to tell CSE how many days of data to fetch the first time you populate your list of indicators. If desired, specify a default TTL that will take effect for Indicators that don’t have a defined expiration. Enter the frequency at which you want to poll the feed for updates. Enter the URL for the feed provider’s TAXII discovery service endpoint. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |