MISP Default Automation Key #9288
Unanswered
kevinelwell
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Fresh install of MISP in Docker. Logged in, navigated to Event Actions --> Automation. Near the top of the page, an automation key is listed. I copied the key into a text file.
Next I setup OpenCTI in Docker and successfully logged into OpenCTI. Now I am setting up the OpenCTI-MISP connector. I add the appropriate entries to the OpenCTI docker-compose.yml file, and restart OpenCTI. I can see in the MISP logs that the email "SYSTEM"
Org "SYSTEM" Action "auth_fail" Title "Failed authentication using API key (XXXX********************************XXXX) "
The API key listed in the failed auth matches the one I pulled from above. Is there a way to reset the SYSTEM API key without a full reinstall?
Beta Was this translation helpful? Give feedback.
All reactions