chronicle / cbn-tool

Command line tool to interact with Chronicle's Config Based Normalizer (CBN) APIs.

Home Page:https://chronicle.security

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

includes

secrutiny-jwinchester opened this issue · comments

Hi there, the cbn tool does not seem to support includes. I think this is because the include is stored locally and not on the server so when running tests the includes are not followed. Is there a way we can pre parse the config and follow the include links to effectively build a temporary conf file with the includes all embedded? Otherwise I am only able to manually embed them which is fine for one or two but any more and things get unwieldy. Just an idea for an FR perhaps??.