MISP
/
misp-docker
mirror of https://github.com/MISP/misp-docker
2
0
Fork 0
Code Issues Releases Wiki Activity

Add syncservers pull rules

pull/107/head
Stefano Ortolani 2024-08-06 13:18:32 +01:00
parent 2f24067089
commit 5ef80d3d0e
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/files/configure_misp.sh
View File

@ -421,7 +421,7 @@ create_sync_servers() {
# Add sync server # Add sync server
echo "... adding new sync server ${NAME} with organization id ${ORG_ID}" echo "... adding new sync server ${NAME} with organization id ${ORG_ID}"
JSON_DATA=$(echo "${!DATA}" | jq --arg org_id ${ORG_ID} 'del(.remote_org_uuid) | . + {remote_org_id: $org_id}') JSON_DATA=$(echo "${!DATA}" | jq --arg org_id ${ORG_ID} 'del(.remote_org_uuid) | . + {remote_org_id: $org_id} | del(..|select(. == ""))')
add_server ${BASE_URL} ${ADMIN_KEY} "$JSON_DATA" > /dev/null add_server ${BASE_URL} ${ADMIN_KEY} "$JSON_DATA" > /dev/null
done done
} }

1
docker-compose.yml
View File

@ -148,6 +148,7 @@ services:
"name": "${SYNCSERVERS_1_NAME}", "name": "${SYNCSERVERS_1_NAME}",
"authkey": "${SYNCSERVERS_1_KEY}", "authkey": "${SYNCSERVERS_1_KEY}",
"url": "${SYNCSERVERS_1_URL}", "url": "${SYNCSERVERS_1_URL}",
"pull_rules": "${SYNCSERVERS_1_PULL_RULES}",
"pull": true "pull": true
} }
# mysql settings # mysql settings

4
template.env
View File

@ -63,6 +63,10 @@ SYNCSERVERS_1_URL=
SYNCSERVERS_1_NAME= SYNCSERVERS_1_NAME=
SYNCSERVERS_1_UUID= SYNCSERVERS_1_UUID=
SYNCSERVERS_1_KEY= SYNCSERVERS_1_KEY=
# pull rules are JSON encoded (and escaped) dictionaries
# Example: only pull events where the analysis is complete
# SYNCSERVERS_1_PULL_RULES='{\"tags\":{\"OR\":[],\"NOT\":[]},\"orgs\":{\"OR\":[],\"NOT\":[]},\"url_params\":\"{\\\"searchanalysis\\\": \\\"2\\\"}\"}'
SYNCSERVERS_1_PULL_RULES=
# optional and used to set mysql db and credentials # optional and used to set mysql db and credentials
# MYSQL_HOST= # MYSQL_HOST=