I am receiving ETF error since last few weeks. Following is the warning message which i am receiving.
(The Warning message is:
THREAT_FEEDS: Unable to fetch the observables from the source: otx.alienvault.com after 3 failed attempts. Reason for failure: Taxii Error: HTTP Error: status code 400 bad request)
Please help me to fix this. I am using otx.alienvault.com to get ETF updates. This was working fine but since 12th October above mentioned warning alert appears on daily basis. I tried every steps. check my configurations multiple times. every thing is fine.
you have to check with alienvault as this error from server.
you can try this out in your pc
docker run --rm=true eclecticiq/cabby:latest taxii-discovery --path https://otx.alienvault.com/taxii/discovery
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
2022-11-01 23:20:07,261 INFO: Sending Discovery_Request to https://otx.alienvault.com/taxii/discovery
2022-11-01 23:20:07,965 ERROR: HTTP Error: status code 400
Has anyone removed this thread feed? I am also getting the same error, and an email every hour about it being unable to fetch. I am debating on removing it, is there any real benefit to having it? Is there a different one thats comparable?