I am having issues with adding AlienVault OTX as a intelligence feed into splunk.
At first, when i didn't configured the threat list as a taxii, it managed to download the threat list as a csv file.
But now, i need to configure it as a taxii for parsing matters and it just stuck on that unhelpful message "TAXII feed polling starting".
My feed configurations are :
Alien Vault OTX feed
I am really frustrated and would really appreciate anyone's help.
Could you please give little bit more detail.
Under contrib directory I see many directories. One of these directories is Directory libtaxii. Do you mean to change this directory completely ? Is there any trusted source to get the libtaxii 1.1.114 ?