- LONGTEXT causes sqlalchemy issues, LONGBLOB works great! changed README accordingly.
- Added documentation on how to configure gunicorn to run the production opentaxii server
** misp_taxii_hooks/hooks.py
- Add auto_publish feature
- Add exception handling
- For MISP.search() `(controller="attributes", value=str(attrib))` was not working at all, changed it to more specific `(controller="attributes", value=str(attrib))`
- Set the default `distribution` to 0 (Your Organization Only), inadvertent sharing of TLP-RED intel could be very bad! This should be configurable in the future
- systemd/journald was taking up lots of ram thanks to gunicorn's excessive logging. I set some of the very noisy `log.info` to `log.debug`
** scripts/run-taxii-poll.py
- Added rate limiting feature
- Continue polling when individual blocks fail to push to the local server
** config/config.default.yaml
- Added auto_publish setting
** scripts/install-remote-server.sh
- Added rate_limit related config lines
It seems that the latest version of pyMISP or MISP itself has changed it data structure. After reviewing the response, this change seemed logical and it is working (at least for me).
ag-michael