Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Complex Build Query TAG parameter not working #1074

Open
cybercitizen7 opened this issue Oct 3, 2023 · 0 comments
Open

Complex Build Query TAG parameter not working #1074

cybercitizen7 opened this issue Oct 3, 2023 · 0 comments

Comments

@cybercitizen7
Copy link

cybercitizen7 commented Oct 3, 2023

Hello,

I am using PyMISP to pull data from our MISP instance. In this case I am using a 'search' command with complex query, that contains OR parameters for TAG applied to Events.

Here is a snippet where I perform this search and build the complex query:

tagQuery = misp.build_complex_query(
        or_parameters  = {
            global,
            country,
        },
        and_parameters = None,
        not_parameters = None
        )

    return misp.search("events", event_tags = tagQuery, date_from = LAST_MONTH, includeEventTags=True, published=False)

Last time I ran this was last month and it worked. Today is no longer working, it seems to ALSO pull Events from MISP that do NOT have the specified 'Tags'. I only need the events with specified tags.

Is this an issue with some newer releases? Or am I missing an update?

EDIT:
I have found out that if i replace event_tags with tags in the misp.search it seems to work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant