Misp: Automatic feeds download

[WakandaKing]

Is there a way to download feeds automatically from a subscribed feed into my MISP instance, instead of going to Sync Actions and downloading manually all the time.

[ater49]

Yes, since version 2.4.80, you can use a "Scheduled Tasks" named "pull_feeds". Refreshing interval feeds by feeds are not implemented at this time. You can do it with a script and the REST API.

[iglocska]

yeah what @ater49 said. I'd recommend REST API is the cleanest.

mymisp/feeds/fetchFromFeed/[id]

[ater49]

cURL syntax: curl --header "Authorization: XXXXXXXXXXXXXXXX" --header "Accept: application/json" --header "C-type: application/json" https://[MISP-URL]/feeds/fetchFromFeed/[Feed-ID]

[WakandaKing]

Thanks guys , but does it not mean that i need to know the event ID in order to use the REST API , referring back to what @iglocska said "mymisp/feeds/fetchFromFeed/[id]" . What i am tying to achieve is that if i am subscribed to feed/community "SpyTracker", whenever "SpyTracker" adds a new event I want this new update/event to also be added to my MISP instance. In other ways i want to always be updated with the new events logged by the communities i am subscribed to

[iglocska]

You need the feed ID, not the event ID ;)

On Wed, Sep 27, 2017 at 11:59 AM, WhiteWalker [e-mail]
wrote:

Thanks guys , but does it not mean that i need to know the event ID in
order to use the REST API , referring back to what @iglocska
https://github.com/iglocska said "mymisp/feeds/fetchFromFeed/[id]" .
What i am tying to achieve is that if i am subscribed to feed/community
"SpyTracker", whenever "SpyTracker" adds a new event I want this new
update/event to also be added to my MISP instance. In other ways i want to
always be updated with the new events logged by the communities i am
subscribed to

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MISP/MISP/issues/2511#issuecomment-332472365, or mute
the thread
https://github.com/notifications/unsubscribe-auth/ADf6wOjk0txLG068RGi33dgcq7ZeAs4Kks5smhxmgaJpZM4Pj1rl
.