O365: No Indicators, Miner not working

Reply
L0 Member

O365: No Indicators, Miner not working

Hi,

 

we use Minemeld for grabbing the Microsoft Office 365 IP's and URL's. 

It run's on a VMWare Server, build with the "Full" .ova with Ubuntu & Minemeld.

 

The installation works fine. After importing the config "office365-config.yml" no indicators are shown.

I tried to import every single Miner with saving and restarting the engine. 

This works so far, until it runs for a week. Then the miners doesn't work anymore. 

At this time in the engine-Log only appears: "2017-03-02T08:43:36 (1487)mgmtbus._status_loop ERROR: timeout in waiting for status updates from nodes". 

 

Since this error the engine is very slow in restarting, up to 20 min. 

 

In our PA-Firewall i see the traffic of this machine, nothing is blocked. 

The Minemeld-Version is up to date.

 

Anybody a clue?

 

Greets

 

L7 Applicator

Re: O365: No Indicators, Miner not working

Hi @marcus.goldmann,

there is a bug in the current release with O365 Miners that will be fixed in the next release (early next week).

In the meantime if you are interested in all the IPs and URLs of O365 you can use this config that doesn't trigger the bug:

https://paloaltonetworks.box.com/s/gndwe5rzheg1ekwplxb4m3mrpcf5k41f

 

Luigi

L7 Applicator

Re: O365: No Indicators, Miner not working

Fixed in MM 0.9.34.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!