topic Re: Minemeld exports feed to another Minemeld via TAXII in General Topics

Minemeld exports feed to another Minemeld via TAXII

Jutice — Wed, 07 Mar 2018 10:07:04 GMT

Hi Guys,

I am a newbie in Minemeld. I have deployed two Minemeld in two VM. Recenlty I am studying how to export the output feed via TAXII to my second Minemeld. May I know is there any way to do that or do we have any miner can poll the feed ?

For the output feed prototype I have used stdlib.taxiiDataFeed.

Please help if anyone know how to do that.

Thanks and Regards,

Daniel

Re: Minemeld exports feed to another Minemeld via TAXII

xhoms — Wed, 07 Mar 2018 20:53:16 GMT

@Jutice,

the JSONSEQMiner class miner provides you with a way to link MineMeld instances together. You can reach to that class using the minemeld.JSONSEQFeed prototype.

So, basically, these are the steps:

In the source MineMeld instance drive your indicators to a feed output node that has been created with the "with value" option
In the destination MineMeld instance create a new prototype using the JSONSEQFeed one as base and changing the URL to point to the source MineMeld's feed URL

This wall all indicators and their corresponding metadata will be shared between MineMeld instances

Re: Minemeld exports feed to another Minemeld via TAXII

Jutice — Fri, 09 Mar 2018 03:24:12 GMT

@xhoms

Thank you for your advice. I will try to work on it.