metron-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dima Kovalyov <Dima.Koval...@sstech.us>
Subject Re: Metron STIX/Taxii enrichment
Date Tue, 04 Oct 2016 17:14:25 GMT
Thank you for a great article Anand,

I am about to follow it and see if it will for me.

- Dima

On 10/04/2016 07:11 PM, Anand Subramanian wrote:
> Hi Dima,
>
> Please see if this helps:
> https://community.hortonworks.com/articles/59698/pushing-stixtaxii-feeds-from-opentaxii-server-into.html
>
>
> Regards,
> Anand
>
>
>
> On 10/4/16, 5:55 AM, "Dima Kovalyov" <Dima.Kovalyov@sstech.us> wrote:
>
>> I am trying to use STIX Extractor and Taxii Loader to load data in HBase
>> table for further Threat Intel enrichment in Metron.
>>
>> I am using following article that describes required configuration
>> https://github.com/apache/incubator-metron/tree/master/metron-platform/metron-data-management
>>
>> However, when I configure and launch following command:
>> /usr/metron/0.2.0BETA/bin/threatintel_taxii_load.sh -e
>> extractor_config_taxii.json -c taxii_endpoint.json -n
>> enrichment_config.json -b '2016-10-01 00:00:00'
>> I receive an error:
>> 16/10/04 00:17:31 ERROR taxii.TaxiiHandler:
>> java.lang.NullPointerException
>> ...
>> Exception in thread "Timer-0" java.lang.RuntimeException: Unable to make
>> request
>> ...
>> Caused by: java.lang.NullPointerException
>> ...
>>
>> Is there any additional documentation for that? (preferably with samples
>> that works).
>>
>> At this point I am just trying  to get any data from any publicly
>> available feed, such as hailataxii.com or open.taxiistand.com.
>>
>> Please share some knowledge or insight. Thank you.
>>
>> - Dima
>>


Mime
View raw message