Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
r1der
Advisor
Jump to solution

Custom Indicators, Observables not visible?

Hello,

Is there a way to see the Observables for custom indicators that is not using CSVs through SmartConsole?

I know it was visible with .csv, but does not appear it works for .txt files?

 

Using the ioc_feeds show --feedname "feednamehere" the command doesn't show me what is the observables either.

 

When I ping one of the sites, it is showing as Prevented in the Logs along with the observable/feed name. So it does appear to be active and working, but was wondering is there any easy way to see the observables?

Thanks!

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Not through SmartConsole, but you can see them in $FWDIR/external_ioc/feedname on the gateway in question.
This is documented in the troubleshooting section here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...,

 

View solution in original post

3 Replies
PhoneBoy
Admin
Admin

Not through SmartConsole, but you can see them in $FWDIR/external_ioc/feedname on the gateway in question.
This is documented in the troubleshooting section here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...,

 

r1der
Advisor

Thanks, exactly what I was looking for. 
Do you know if external IOC observables will ever be visible in SmartConsole?

0 Kudos
PhoneBoy
Admin
Admin

No idea if that's planned or not.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events