certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Home Page:https://docs.intelmq.org/latest/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature Request: Shadowserver parser setting feed.documentation link

gethvi opened this issue · comments

As the title says. feed.documentation can not be configured beforehand because the shadowserver parser processes various reports dynamically based on a schema.

Currently the parser sets correct feed.name. It could also set the feed.documentation link for each report type.

There are many extra fields.

As a workaround, a sieve filter can be used