You can still be goofy, but there is nothing wrong with that :)

On July 25, 2017 at 10:58:05, Ziaja Aleksander ([email protected])
wrote:

Thanks God. I have thought I am goofy J

Thank you for quick ans. I will patch.

-AZ





*From:* Casey Stella [mailto:[email protected]]
*Sent:* Tuesday, July 25, 2017 4:52 PM
*To:* [email protected]
*Cc:* [email protected]
*Subject:* Re: FW: STIX extractor problem.



Yep, unfortunately this is a bug and there's a PR open for it: METRON-1026
https://github.com/apache/metron/pull/643





On Tue, Jul 25, 2017 at 3:49 PM, Ziaja Aleksander <
[email protected]> wrote:

Hi All,

I would like to ask you (I still can not figure out why it happenes , may
be it is so obvious ...) what means exeption:



Exception in thread "main" java.lang.IllegalStateException: Extractor must
be a STIX Extractor
        at
org.apache.metron.dataloads.nonbulk.taxii.TaxiiLoader.main(TaxiiLoader.java:202)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
        at org.apache.hadoop.util.RunJar.main(RunJar.java:148)

executed: /usr/metron/0.4.0/bin/threatintel_taxii_load.sh -c
/opt/taxii/connection.json  -e /opt/taxii/extractor.json
os: Centos 7

config files:
cat /opt/taxii/connection.json
{
   "endpoint" : "https://xxxxx/taxii-discovery-service";
  ,"type" : "DISCOVER"
  ,"username" : "xxxx"
  ,"password" : "xxxx"
  ,"collection" : "guest.Abuse_ch"
  ,"table" : "threat_intel"
  ,"columnFamily" : "cf"
  ,"allowedIndicatorTypes" : [ "domainname:FQDN", "address:IPV_4_ADDR" ]
}

cat /opt/taxi/extractor.json
{
  "config" : {
    "stix_address_categories" : "IPV_4_ADDR"
  }
  ,"extractor" : "STIX"
}

So please, any sugestions welcome.
Thank you in advance.
-Alex

Reply via email to