Multiple TAXII outputs within a single minemeld instance?

Announcements

Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Reply
chtoh82
L2 Linker

Multiple TAXII outputs within a single minemeld instance?

Hi,

 

If I have a configuration of 2 taxii outputs within a node, the output feed discovery service url for both taxii output nodes are the same, in this case, how do we differentiate them? Would authentication with Tags helps? Thanks!

 

 

Screen Shot 2018-05-10 at 11.54.08 AM.pngScreen Shot 2018-05-10 at 11.54.47 AM.pngScreen Shot 2018-05-10 at 11.54.59 AM.png

Simon_10
L0 Member

Hi Chtoh82,

I have the same problem. Did you find a solution?

Thanks in advance.

lmori
L1 Bithead

In TAXII you don't need a URL per feed, the TAXII Client interrogates the TAXII Discovery Service to discover the available services and then the client interrogates the TAXII Collection Management Service (whose URL is returned by the TAXII Discovery Service) to list the available Data Feeds.

So basically yes, MineMeld does support multiple output TAXII Data Feeds and you just need one URL to access them all. Based on authorization configs (TAGS) different users will see different available feeds.

Simon_10
L0 Member

Hi Lmori,

Many thanks for the the clarification!

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!