Graylog2 / Graylog2/graylog-plugin-integrations

Update GreyNoise Community IP Lookup Adapter

Open
#957 0 comments 0 reactions 1 assignee Claimed by @roberto-graylog View on GitHub
feature
Dominant language
Java
Stars
17
Forks
14
PR merge metrics
No merged PRs in 30d

Description

# Description
Update the Greynoise Community IP Lookup Adapter per meeting with Greynoise

## What
Per meeting with Greynoise, we discovered that we can suppress the 'message' field in the response, as it has no value for the end user, and we should only query valid IPv4 addresses.

Further, we can remove the version from the User Agent.

## Why
These changes were recommended by Greynoise for better user results as well as to reduce queries with IP addresses that not valid (e.g. reserved addresses, IPv6).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.