• Support
  • Forums
  • Blogs

TAXII Collections are empty, why?

myersj0myersj0

New Life Form
Hi,

I've accessed the TAXII Discovery endpoint, and based on my account I get back three collections:

user_AlienVault
group_XYZ
user_myUserName

The group one showed up after creating a private group, as expected.

However, I am both subscribed to pulses and have added pulses to my group, and polling the group_* and user_* collections yield nothing. I only have some indicators that come back from the user_AlienVault collection.

Are the group/user collections supposed to be populated with data? If not, why are they even there?

Tagged:

Share post:

Answers

  • I am having the same problem.
  • After a day, pulses that I added to a group are not showing up in that group's collection via TAXII. It appears that maybe there is a delay/job that has to run for the IoCs to "transfer" to be available via TAXII...
Sign In or Register to comment.