Misp: Support for array of sightings

[haegardev]

Could the following data structure be supported when using sighting.

Request

[
{
"type": 0,
"values": [
"2.2.2.2"
],
"source": "mysensor"
},
{
"type": 0,
"values": [
"1.1.1.1"
],
"source": "mysensor"
}
]

The current answer is:

{u'url': u'/sighting/add', u'message': u'Could not add Sighting', u'errors': [u'Could not add Sighting'], u'name': u'Could not add Sighting'}

[FloatingGhost]

Daily reminder to stop using python2

[adulau]

The idea behind is very simple. We have many honeypots and sensors that would need to update the sightings. So updating single sighting instead of an array of sighting is not really efficient.

[iglocska]

Just revisiting this: You can add multiple sightings in this format:

{
  "type": 0,
  "values": [
    "1.1.1.1",
    "2.2.2.2"
  ]
}

So you'd only really need to do one request per bundle. However, if you want to encode different sighting dates / sources / types you'd have to do separate requests. Is the current behaviour enough, or should I change it?