Atlassian custom Miner and Feed

[JDomNY]

I am trying to create a miner/feed for Atlassian IP-Ranges which they publish in a JSON file. I have configured the below and it all looks good and I have Indicators, but when I go to the feed URL it returns a blank page.

I created the prototype by using AWS EC2 list which also uses JSON

[JDomNY]

Adding in screenshot of my processor config

[JDomNY]

Interestingly enough if I Curl my Feed URL it returns all the proper addresses, but now when I use Chrome

[lmori · Accepted solution]

Hi @JDomNY,

just tested with your same prototype and it works for me:

age_out:
    default: null
    interval: 257
    sudden_death: true
attributes:
    confidence: 100
    share_level: green
    type: IPv4
extractor: items
indicator: cidr
prefix: atlassian
source_name: atlassian.RANGES
url: https://ip-ranges.atlassian.com

[JDomNY]

There is something odd going on with my URL's and F5 I have in front of my Minemeld boxes.  It's working fine if I use the server hostname instead of my LTM URL, interestingly enough it also work with the GTM URL so I'm all set.  Thanks for reviewing

[lmori]

Consider a Pull Request to the prototypes github repo 😉