I recently created a new miner to pull domains from a threat intel provider. I can see the Miner is pulling the expected amount of domains. However, my associated processor is not pulling anything from the miner.
I've already looked the the obvious things: like is Output enabled on my miner etc.
I can see in the logs that the processor is recvd_update however it immediately drop_update right after for all 10,000 indicators.
is there a log file on the console I can see DROP reasoning from a processor perspective?
Any suggestions would be appreicated.
snipping of the log page, edited for confidentiality:
Solved! Go to Solution.
I have fixed this issue. The problem was in my miner under attributes section, under the type attribute I had "Domain" instead of "domain". Should've known Pythin and Linux is case sensitive.
I rebuild the miner with the correct attribute and viola, it works!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!