Add an object to an event.

External Documentation

To learn more, visit the MISP documentation.

​
Parameters

ParameterDescription
AttributeAttributes of the object.Example:[ { "category": "Internal reference", "value": "127.0.0.1", "to_ids": true, "disable_correlation": false, "distribution": "0", "comment": "logged source ip", "object_relation": "sensor" }]
Event IDUUID or numeric ID of the event. Can be obtained by using the List Events action.
Object Template IDUUID Or numeric ID of the object template.

​
Example Output

{
	"Object": {
		"id": "12345",
		"name": "ail-leak",
		"meta-category": "string",
		"description": "string",
		"template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
		"template_version": "1",
		"event_id": "12345",
		"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
		"timestamp": "1617875568",
		"distribution": "0",
		"sharing_group_id": "1",
		"comment": "string",
		"deleted": true,
		"first_seen": "1581984000000000",
		"last_seen": "1581984000000000",
		"Attribute": [
			{
				"id": "12345",
				"event_id": "12345",
				"object_id": "12345",
				"object_relation": "sensor",
				"category": "Internal reference",
				"type": "md5",
				"value": "127.0.0.1",
				"to_ids": true,
				"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
				"timestamp": "1617875568",
				"distribution": "0",
				"sharing_group_id": "1",
				"comment": "logged source ip",
				"deleted": false,
				"disable_correlation": false,
				"first_seen": "1581984000000000",
				"last_seen": "1581984000000000"
			}
		]
	}
}

​
Workflow Library Example

Add Object with Misp and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?