12-16-2016 06:49 AM
Hi,
The miner Ransomware IP has > 10000 so I'am wondering how I could solve this issue. Should have some output feed that you can define to take a certain amount of IP's so you can map that on your hardware. And then create a second output that is skippen a defined amount of IPs an creating output feed with next range of IPs
Something like:
miner => processor aggregator => output A en output B.
=> output A : IP = 1 - 5000
=> output B: IP = 5001 till 10000
...
Maybe any idea?
Regards,
Kevin
12-16-2016 07:47 AM
you can use QUERY_STRING on feed URL of s=start, n=num as discussed here:
https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Confused-over-EBL-size-limit/m-p/104038/
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
