Splunk Enterprise Security

inputintelligence command not working

mekhanlarloo
Loves-to-Learn Lots

hi

When I type this command, the following error message is displayed.

| inputintelligence mitre_attack

error command:

Error in 'inputintelligence' command: Inputintelligence does not support threat intel at this time

can you help me, how can i solve my problem?

Labels (1)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk Enterprise Security supports threat intelligence and generic intelligence feeds.  The inputintelligence command works only with generic feeds.  It's not explicitly stated in the documentation, but is implied by the command being described in the "Use generic intelligence in search with inputintelligence" section of the ES manual. (https://docs.splunk.com/Documentation/ES/7.3.0/Admin/Useintelinsearch)

---
If this reply helps you, Karma would be appreciated.
0 Karma

mekhanlarloo
Loves-to-Learn Lots

I ran this command elsewhere and it didn't give me this error message.

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...