Disable correlation for IntelMQ time fields

pull/416/head
Christos Arvanitis 2024-03-05 11:22:17 +01:00
parent 173af552aa
commit a367c43eb9
2 changed files with 3 additions and 0 deletions

View File

@ -405,11 +405,13 @@
},
"time.observation": {
"description": "The time the collector of the local instance processed (observed) the event.",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 1
},
"time.source": {
"description": "The time of occurence of the event as reported the feed (source).",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 1
},

View File

@ -47,6 +47,7 @@
},
"time.observation": {
"description": "The time the collector of the local instance processed (observed) the event.",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 1
}