mirror of https://github.com/MISP/misp-objects
Disable correlation for IntelMQ time fields
parent
173af552aa
commit
a367c43eb9
|
@ -405,11 +405,13 @@
|
|||
},
|
||||
"time.observation": {
|
||||
"description": "The time the collector of the local instance processed (observed) the event.",
|
||||
"disable_correlation": true,
|
||||
"misp-attribute": "datetime",
|
||||
"ui-priority": 1
|
||||
},
|
||||
"time.source": {
|
||||
"description": "The time of occurence of the event as reported the feed (source).",
|
||||
"disable_correlation": true,
|
||||
"misp-attribute": "datetime",
|
||||
"ui-priority": 1
|
||||
},
|
||||
|
|
|
@ -47,6 +47,7 @@
|
|||
},
|
||||
"time.observation": {
|
||||
"description": "The time the collector of the local instance processed (observed) the event.",
|
||||
"disable_correlation": true,
|
||||
"misp-attribute": "datetime",
|
||||
"ui-priority": 1
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue