Perform the Setup using the setup page.
The download of indicators is performed based on the misp_list.csv file and downloaded on the following command: '| getmisp'
By default a download is launch every day at 0:00am. In order to force a download, launch the report GetMispData
All the configuration is perform through the misp_lists.csv lookup.
For more details about the configuration of misp_lists.csv, read README.txt in the application.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.