cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1042
Views
5
Helpful
1
Replies

adding threat feeds to taxii resource

Need help.

I can query our threat feeds from Postman tool just by this URL - myopencti.threatintel.ca:8080/taxii2/root/collections/a9c7f32e-7c66-42f4-8071-27e172a0055b/objects

 

Given this URL, What should be the "Polling Path:" and "Collection Name:"

1 Reply 1

SriramV
Cisco Employee
Cisco Employee

Hi,

 

the log share by is of stix version 2.1, which is not supported by ESA

The following versions of STIX/TAXII are supported by ESA

STIX 1.1.1 and 1.2 with TAXII 1.1

 

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0110001.html