• Support
  • Forums
  • Blogs
A New Community Experience is Coming! For more information, please see our announcement.

TAXII Collections are empty, why?

myersj0myersj0

New Life Form
Hi,

I've accessed the TAXII Discovery endpoint, and based on my account I get back three collections:

user_AlienVault
group_XYZ
user_myUserName

The group one showed up after creating a private group, as expected.

However, I am both subscribed to pulses and have added pulses to my group, and polling the group_* and user_* collections yield nothing. I only have some indicators that come back from the user_AlienVault collection.

Are the group/user collections supposed to be populated with data? If not, why are they even there?

Tagged:

Share post:

Answers

  • I am having the same problem.
  • After a day, pulses that I added to a group are not showing up in that group's collection via TAXII. It appears that maybe there is a delay/job that has to run for the IoCs to "transfer" to be available via TAXII...
Sign In or Register to comment.