Forum Discussion
JKatzmandu
Aug 05, 2020Brass Contributor
Another TAXII Query
Hello everyone! We've set up a TAXII data source and TI with some success. I'm curious; how often does the TAXII connector reach out to Anomali (or any other provider) and refresh the data? Shoul...
JBUB_Accelerynt
Aug 07, 2020Brass Contributor
JKatzmandu We have support tickets open with MS on the similar issue. I don't think it's a TAXII issue. It's a TI logging issue. We can generate new IOCs in the TiIndicators via the api, but they dont always show up in the logs. Something is not working for sure.
- lwallimannOct 21, 2020Copper ContributorJBUB_Accelerynt Do you have more information out of the support ticket? We are facing similar issues, I see the indicators on the Threat intelligence page but not in the Log. Also in the TAXII connector the Last Log Received is -- I think somithing is still not working as expected...
- JKatzmanduNov 06, 2020Brass Contributor
With a few of my customers things seem to be magically working on their own. At least some of the data has an "expiration date" as a field and it gets updates over time.