remg427/misp42splunk

Misp tagging local or global

Opened this issue · 1 comments

Can you help to find, how i can create a local tag in misp from splunk.

currently from the splunk search i am able to make global tag into misp where field name use is misp_tag.

If i want to create local tab , is there something different i have to do and how ?