PyMISP/examples/feed-generator-from-redis/settings.default.py

""" REDIS RELATED """
# Your redis server
host='127.0.0.1'
port=6379
db=0
## The keynames to POP element from
keyname_pop=['cowrie']

# OTHERS
## If key prefix not provided, data will be added as either object, attribute or sighting
fallback_MISP_type = 'object'
### How to handle the fallback
fallback_object_template_name = 'cowrie' # MISP-Object only
fallback_attribute_category = 'comment'  # MISP-Attribute only

## How frequent the event should be written on disk
flushing_interval=5*60
## The redis list keyname in which to put items that generated an error
keyname_error='feed-generation-error'

""" FEED GENERATOR CONFIGURATION """

# The output dir for the feed. This will drop a lot of files, so make
# sure that you use a directory dedicated to the feed
outputdir = 'output'

# Event meta data
## Required
### The organisation id that generated this feed
org_name='myOrg'
### Your organisation UUID
org_uuid=''
### The daily event name to be used in MISP.
### (e.g. honeypot_1, will produce each day an event of the form honeypot_1 dd-mm-yyyy)
daily_event_name='PyMISP default event name'

## Optional
analysis=0
threat_level_id=3
published=False
Tag=[
    {
        "colour": "#ffffff",
        "name": "tlp:white"
    },
    {
        "colour": "#ff00ff",
        "name": "my:custom:feed"
    }
]

# MISP Object constructor
from ObjectConstructor.CowrieMISPObject import CowrieMISPObject
from pymisp.tools import GenericObjectGenerator

constructor_dict = {
    'cowrie': CowrieMISPObject,
    'generic': GenericObjectGenerator
}

# Others
## Redis pooling time
sleep=60