MISP / MISP/misp-modules

csvimport support

Open
#611 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

support
Dominant language
Python
Stars
377
Forks
280
Avg merge
2d 2h
Merged PRs (30d)
10

Description

I've been trying to piece together details from various resources on how to use the csvimport module but I'm hoping someone with more experience can help me out. I'm unsure how to query it using the API--I've enabled the module and everything and get a list of modules returned from http://127.0.0.1:6666/modules, so the module should be working. Specifically, I'm unsure of the syntax that the module is expecting to receive....do I just format it the way the userConfig object is formatted in csvimport.py? Or do I edit csvimport.py directly and put the header values in there? Also, from what I've read it sounds like I should be able to see/use this module in the Web UI....? But when I go to Events Actions > Add Event > Import from... there is no option for csv.

Screen Shot 2023-05-15 at 12 50 35 PM

Ubuntu 20.04.6 LTS

MISP 2.4.168

PyMISP 2.4.157

Python 3.8.10

I also just updated misp-modules per these instructions: https://github.com/MISP/misp-book/tree/main/updating-python#updating-misp-modules

TIA

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading csvimport.py and the module API behavior exposed at /modules, then compare that with the Web UI path Events Actions > Add Event > Import from. Determine the expected request syntax and whether CSV should appear in the UI; done means the usage and availability are clearly documented or the missing integration is identified.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, documentation
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.