Hi, I checked Splunkbase for an integration with an intel feed reader we use, Obstract (https://www.obstracts.com/), but was unable to find anything.
They offer a TAXII feed (version 2.1) but I don't think this is supported by ES (this link says only 1.x supported: https://docs.splunk.com/Documentation/ES/latest/RN/Enhancements)? Can anyone confirm?
Of this is the case, is anyone else using Obstracts with Splunk ES?
