Skip to content

Commit 686cbe3

Browse files
authored
Merge pull request #2454 from gethvi/fix-shadowserver-parser-docs
FIX: Fixes small docs breakage.
2 parents 51500be + a39fff4 commit 686cbe3

File tree

1 file changed

+15
-14
lines changed

1 file changed

+15
-14
lines changed

docs/user/bots.md

Lines changed: 15 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -2128,23 +2128,23 @@ correct mapping of the columns:
21282128

21292129
1. **Automatic report type detection**
21302130

2131-
Since IntelMQ version 2.1 the parser can detect the feed based on metadata provided by the collector.
2132-
2133-
When processing a report, this bot takes `extra.file_name` from the report and looks in `config.py` how the report
2134-
should be parsed. If this lookup is not possible, and the `feedname` is not given as parameter, the feed cannot be
2135-
parsed.
2136-
2137-
The field `extra.file_name` has the following structure: `%Y-%m-%d-${report_name}[-suffix].csv` where the optional
2138-
suffix can be something like `country-geo`. For example, some possible filenames
2139-
are `2019-01-01-scan_http-country-geo.csv` or `2019-01-01-scan_tftp.csv`. The important part is the `report_name`,
2140-
between the date and the suffix. Since version 2.1.2 the date in the filename is optional, so filenames
2141-
like `scan_tftp.csv` are also detected.
2131+
Since IntelMQ version 2.1 the parser can detect the feed based on metadata provided by the collector.
2132+
2133+
When processing a report, this bot takes `extra.file_name` from the report and looks in `config.py` how the report
2134+
should be parsed. If this lookup is not possible, and the `feedname` is not given as parameter, the feed cannot be
2135+
parsed.
2136+
2137+
The field `extra.file_name` has the following structure: `%Y-%m-%d-${report_name}[-suffix].csv` where the optional
2138+
suffix can be something like `country-geo`. For example, some possible filenames
2139+
are `2019-01-01-scan_http-country-geo.csv` or `2019-01-01-scan_tftp.csv`. The important part is the `report_name`,
2140+
between the date and the suffix. Since version 2.1.2 the date in the filename is optional, so filenames
2141+
like `scan_tftp.csv` are also detected.
21422142

21432143
2. **Fixed report type**
21442144

2145-
If the method above is not possible and for upgraded instances, the report type can be set with the `feedname`
2146-
parameter. Report type is derived from the subject of Shadowserver e-mails. A list of possible values of
2147-
the `feedname` parameter can be found in the table below in the column "Report Type".
2145+
If the method above is not possible and for upgraded instances, the report type can be set with the `feedname`
2146+
parameter. Report type is derived from the subject of Shadowserver e-mails. A list of possible values of
2147+
the `feedname` parameter can be found in the table below in the column "Report Type".
21482148

21492149
**Module:**
21502150

@@ -2200,6 +2200,7 @@ The schema revision history is maintained at https://github.com/The-Shadowserver
22002200
auto_update: true
22012201
run_mode: continuous
22022202
```
2203+
22032204
---
22042205

22052206
### Shodan <div id="intelmq.bots.parsers.shodan.parser" />

0 commit comments

Comments
 (0)