No indicators for output

[timothyyip]

It was found that output (high, medium and low) have not incidcators event aggregator has over 2xxxx indicators. Please see attachment.

How to resolve it? Many thanks!

[lmori]

Hi @timothyyip,

you don't see any indicator in outbound* and inbound* feeds ? when you click on the feed URLs, are they empty ?

luigi

[timothyyip]

it just shown a few indicators, however, according to aggregator, it shown that it has over 20000 indicators.

please see attachments.

thanks!

[lmori]

Please, could you export your config text from CONFIG page using the export button and share it ?

Thanks,

luigi

[timothyyip]

Please find attached configuration

Similar problem also occurred on Domain and URL output.

[lmori]

Hi @timothyyip,

I have tried loading your config on a MM test instance and it works for me.

Which version of MM are you running ? If it's older than 0.9.32, could you update it ? If not, was it upgraded from an older version ?

Couple of notes on your config:

- as all the IP feeds are already connected to IPv4Aggregator, connection from outboundaggregator and inboundaggregator to IPv4Aggregator are not really needed.

- ransomwaretracker.RW_* feeds already contains the indicators of ransomwaretracker.TC_*, LY_*, ... You could simplify your config and keep all your indicators by removing the ransomwaretracker.TC_*, LY_* , TL_* feeds. 

[timothyyip]

It is version 0.9.34 , the number of miner's indicators is not match with output.

[lmori · Accepted solution]

Hi @timothyyip,

if you are using all the ransomwaretracker feeds that could be normal, as the RW_* feeds already include the contents of the single TC, LY, ... feeds. Aggregators remove duplicates.

Are you seeing indicators in the output nodes now ?

[timothyyip]

Yes, thank you!