3rd party managed minemeld feed to local

[raji_toor]

We have a service provider(SP) with authenticated minemeld feed and we want to pull feed from the SP minemeld which asks for authentication into our local minemeld instance, instead of directly into our firewall. How can we do that.

[aleksandar.astardzhiev]

Hi @raji_toor ,

There is minemeld.JSONSEQFeed prototype miner that I believe can be used for such purpose. I haven't tested it, but based on the name It seems it is expecting json format. But it provides you option to use username and password (when you clone the prototype and create miner node, under the node details you will see field for username and password)

[raji_toor]

@aleksandar.astardzhiev I do not see the username/password option when I click new and clone never shows the details. This is what I see in my docker instance.

And if instead select the clone option

[aleksandar.astardzhiev]

Hi @raji_toor ,

You will see Username and Password fields when you create a node.

1. Using new create new prototype where you can put the URL (replace "url: none" from your first picture)

2. Select the newly created prototype and use clone to create a miner node

3. Commit your changes

4. Go to Nodes tab, find your miner and there you will see the credentials fields

[raji_toor]

@aleksandar.astardzhiev  First sorry for the extreme late reply as i only got the time to test it today. Below the Url I inserted in the new prototype minemeld.JSONSEQFeed

And here is the node as you said where i need to enter username and password

The number of indicators for the feed as you see is still zero..

Miner shows this error

As I had to deliver a quick work around, I was able to download the feed locally with a powershell script and the import it to minemeld easily. But it would still be great if i can do it directly in minemeld.

Thank you 🙂