EDL
Use the Generic Export Indicators Service integration to provide an endpoint with a list of indicators as a service for the system indicators.
Data Enrichment & Threat Intelligence · Generic Export Indicators Service
Configuration parameters
on_demand— Update list on demand onlyindicators_query— Indicator Queryformat— Outbound Formatfields_filter— Exported Fieldsedl_size— List Sizecache_refresh_rate— Refresh Ratecertificate— Certificate (Required for HTTPS)key— Private Key (Required for HTTPS)cache_lock_timeout— Cache Lock Timeoutcache_lock_age— Cache Lock Agecache_404_ttl— Cache 404 TTLcache_default_ttl— Cache Default TTLcredentials— UsernamelongRunningPort— Listen Port (required)add_comment_if_empty— Add comment to empty listurl_port_stripping— Strip ports from URLsurl_protocol_stripping— Strip protocols from URLsurl_truncate— Truncate URL lengthenforce_ascii— Enforce ASCII onlyprepend_string— Prepend string to listappend_string— Append string to listcollapse_ips— IP Collapsingmaximum_cidr_size— Maximum Size of CIDR Block (by mask bit)no_wildcard_tld— Exclude top level domainGlobsdrop_invalids— PAN-OS: drop invalid URL entrieshsts_header— Add HSTS headermwg_type— McAfee Gateway: Indicator List Typecategory_default— Symantec ProxySG: Default Categorycategory_attribute— Symantec ProxySG: Listed Categoriescsv_text— Show CSV format as Textpage_size— XSOAR Indicator Page SizelongRunning— Long Running Instancenginx_global_directives— NGINX Global Directivesnginx_server_conf— NGINX Server Conftimeout— NGINX Read Timeoutuse_legacy_query— Advanced: Use Legacy Queriesextensive_logging— Extensive Logging
Commands (2)
-
edl-updateDeprecatedUpdates values stored in the EDL (only available On-Demand).
-
export-indicators-list-updateUpdates values stored in the List (only available On-Demand).