<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Processor not pulling from Miner in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/processor-not-pulling-from-miner/m-p/238597#M98445</link>
    <description>&lt;P&gt;Hello Folks,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I recently created a new miner to pull domains from a threat intel provider. I can see the Miner is pulling the expected amount of domains. However, my associated processor is not pulling anything from the miner.&lt;/P&gt;
&lt;P&gt;I've already looked the the obvious things: like is Output enabled on my miner etc.&lt;/P&gt;
&lt;P&gt;I can see in the logs that the processor is recvd_update however it immediately drop_update right after for all 10,000 indicators.&lt;/P&gt;
&lt;P&gt;is there a log file on the console I can see DROP reasoning from a processor perspective?&lt;/P&gt;
&lt;P&gt;Any suggestions would be appreicated.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;snipping of the log page, edited for confidentiality:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Untitled.png" style="width: 800px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/17444i7E6CAFDA1327640A/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Untitled.png" alt="Untitled.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Thanks,&lt;BR /&gt;Eddie&lt;/P&gt;</description>
    <pubDate>Mon, 05 Nov 2018 17:21:49 GMT</pubDate>
    <dc:creator>Eddie_Brown</dc:creator>
    <dc:date>2018-11-05T17:21:49Z</dc:date>
    <item>
      <title>Processor not pulling from Miner</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/processor-not-pulling-from-miner/m-p/238597#M98445</link>
      <description>&lt;P&gt;Hello Folks,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I recently created a new miner to pull domains from a threat intel provider. I can see the Miner is pulling the expected amount of domains. However, my associated processor is not pulling anything from the miner.&lt;/P&gt;
&lt;P&gt;I've already looked the the obvious things: like is Output enabled on my miner etc.&lt;/P&gt;
&lt;P&gt;I can see in the logs that the processor is recvd_update however it immediately drop_update right after for all 10,000 indicators.&lt;/P&gt;
&lt;P&gt;is there a log file on the console I can see DROP reasoning from a processor perspective?&lt;/P&gt;
&lt;P&gt;Any suggestions would be appreicated.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;snipping of the log page, edited for confidentiality:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Untitled.png" style="width: 800px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/17444i7E6CAFDA1327640A/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Untitled.png" alt="Untitled.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Thanks,&lt;BR /&gt;Eddie&lt;/P&gt;</description>
      <pubDate>Mon, 05 Nov 2018 17:21:49 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/processor-not-pulling-from-miner/m-p/238597#M98445</guid>
      <dc:creator>Eddie_Brown</dc:creator>
      <dc:date>2018-11-05T17:21:49Z</dc:date>
    </item>
    <item>
      <title>Re: Processor not pulling from Miner</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/processor-not-pulling-from-miner/m-p/238774#M98446</link>
      <description>&lt;P&gt;I have fixed this issue. The problem was in my miner under attributes section, under the type attribute I had "Domain" instead of "domain". Should've known Pythin and Linux is case sensitive.&lt;/P&gt;
&lt;P&gt;I rebuild the miner with the correct attribute and viola, it works!&lt;/P&gt;</description>
      <pubDate>Tue, 06 Nov 2018 17:24:37 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/processor-not-pulling-from-miner/m-p/238774#M98446</guid>
      <dc:creator>Eddie_Brown</dc:creator>
      <dc:date>2018-11-06T17:24:37Z</dc:date>
    </item>
  </channel>
</rss>

