I have just installed the app and modified the Lookups to point to our MISP instance. On the app setup page I am getting the following error when trying to set the misp key: ERROR: Delete user failed, cannot find the credential information with id : credential:MISP:admin:
Looking forward to being able to try this out!
I am digging through the config files, looks like they forgot to add that, the document is a little vague. I figure adding the misp server ip/url with the API key would make it easier instead of editing config files...
Which config file should I edit for editing misp server ip?
Same scenario and error on Splunk version 6.6.2
I had to it by enabling pulling the files from the misp server. I monitor the files in the folder and add them to lookup list. Not elegant or awesome but it works.
I removed the MISP app as its outdated anyways.