MISP module

Caveats

• Module is to be considered beta.

How to try the module from distribution install

You should already have MISP installed and running. Information about the MISP platform can be found here: https://www.circl.lu/doc/misp.

./filebeat setup --modules=misp -e --dashboards

Enable the MISP module

./filebeat modules enable misp

Start Filebeat

./filebeat -e

You can see the MISP Overview dashboard and the imported threat indicators in Kibana.