5.6.18. `Config - sigflow/MISP` screen of the legacy web UI

This screen allows to manage updates.
This screen is only accessible to members of the administrator` group.
After pressing the `MISP` Menu sub menu `Config/Sigflow`, the following screen is displayed.
../../_images/MISP-01.PNG

The `Misp suricata` screen contains the following parts:

Marker

Name

Function

1

`Resume`

Area for access to update configuration. This area includes:

2

  • `Automatic update`

Link to automatic update settings screen

3

  • `Manual update`

Link to manual update setup screen

4

`Last updates`

Area with information on the latest updates whether automatic or manual

After pressing the `Automatic update` link, the `Automatic Update settings` screen contains the following parts:

../../_images/MISP-02.PNG

Item

Name

Function

1

`Enable/disable automatic generation`

Enables or disables automatic generation of updates

3

`Automatic generation start date*`

Select start date

4

`Generation time (UTC) (Current: 18:04:51)*`

Enter the update time in UTC

5

`Generation period (in days)*`

Select periodicity in days

6

` Events age (in days)*`

Enter the maximum age of the events retrieved

7

`Save`

Save parameters and run programming

After pressing the `Manual update` link, the `Manual update settings` screen contains the following parts:

../../_images/MISP-03.PNG

Item

Name

Function

1

`Date interval*`

Enables or disables automatic generation of updates

2

`Fast mode* `

Allows quick update but Caution:
this will erase any customization at the rule level (thresholds, disabled lists, transformations, ...)

3

`Save`

Saves the parameters and starts an immediate update with the selected parameters

See the procedure Configuring the connection to the MISP.