Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About lmori
About lmori
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
3 weeks ago
6Posts
3Likes
3Solutions
Mar 18, 2021Last Visited
User
Activity
User
Profile
Latest posts by lmori
| Subject | Views | Posted |
|---|---|---|
| 306 | 03-11-2021 06:03 AM | |
| 114 | 03-10-2021 05:34 AM | |
| 167 | 03-05-2021 06:12 AM | |
| 246 | 02-23-2021 12:40 AM | |
| 2530 | 02-19-2021 03:00 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-11-2021 06:03 AM | |
| 2 | 10-28-2020 07:30 AM |
User Badges
Public Statistics
| Date Registered | 10-28-2020 07:16 AM |
| Date Last Visited | 3 weeks ago |
| Total Messages Posted | 6 |
| Total Likes Received | 3 |
03-11-2021
06:03 AM
1 Kudo
Hi @LassiK ,
MineMeld binaries are not compatible with Ubuntu 18.04.
My suggestion for running it on 18.04 is using Docker image. Moving forward that will be the preferred way of deployment.
Luigi
... View more
03-10-2021
05:34 AM
@Romans6 @ChaunceyBrace could you tell me more about your configs? How many IOCs? what type of nodes? what process is taking most of the memory?
... View more
03-05-2021
06:12 AM
In TAXII you don't need a URL per feed, the TAXII Client interrogates the TAXII Discovery Service to discover the available services and then the client interrogates the TAXII Collection Management Service (whose URL is returned by the TAXII Discovery Service) to list the available Data Feeds.
So basically yes, MineMeld does support multiple output TAXII Data Feeds and you just need one URL to access them all. Based on authorization configs (TAGS) different users will see different available feeds.
... View more
02-23-2021
12:40 AM
For that JSON structure you cannot use the JSON parser, as the indicators are the keys of the feed and this is not supported. The JSON Miners expects a list of objects/indicators. Also if the feed is large JSON does not scale too well, as the full file should be loaded and parsed to extract indicators. I would suggest to use CSV Miner instead.
The problem with the filter on the score is that the score attribute is a string and not a number, the filter score > 99 could not work then. You should convert score to number before filtering, basically yous should try: to_number(score) > 99
... View more
02-19-2021
03:00 AM
@JohanBogema working a new version of MineMeld based on python3 and new docker mechanism. Please note that while the init process inside the current docker image is running as root, MineMeld and all the exposed services are running as limited users.
... View more
10-28-2020
07:30 AM
2 Kudos
We have identified the issue and we are working on it.
In the meantime you can disable the send-a-suggestion feature that is triggering the crash in 2 ways:
- from the config, https://github.com/PaloAltoNetworks/minemeld-ansible#disable-send-a-suggestion-check
- on the docker CLI, add:
-e "SNS_ENABLED=false"
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
3 weeks ago
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
