Graylog2 / Graylog2/graylog-plugin-threatintel

Documentation is insufficient

Open
#66 0 comments 1 reaction 0 assignees View on GitHub
documentation
Dominant language
Java
Stars
158
Forks
18
PR merge metrics
No merged PRs in 30d

Description

Hello, the documentation says that this plugin needs to be configured in `/opt/graylog/conf/graylog.conf`, but it dose not say anything about acceptable Keys or Values.

I read the source code and guessed at the following config key=value's

otx_enabled = true # boolean otxEnabled
otx_api_key = 5f554abe80f4fc75815904be89621f096c77ec2cb58ca449f57061a0db2cb31a # @Nullable String otxApiKey
tor_enabled = true # boolean torEnabled
spamhaus_enabled = true # boolean spamhausEnabled
abusech_ransom_enabled = true # boolean abusechransomEnabled

I then ran `sudo graylog-ctl restart` a couple times.

None of the example Search strings in the Readme.md have any effect. There are no new values added to the output, and no indication that anything at all happened.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.