Add an object to an event.

External Documentation

To learn more, visit the MISP documentation.

​
Parameters

ParameterDescription
AttributeAttributes of the object.
Example:
[
{
"category": "Internal reference",
"value": "127.0.0.1",
"to_ids": true,
"disable_correlation": false,
"distribution": "0",
"comment": "logged source ip",
"object_relation": "sensor"
}
]
Event IDUUID or numeric ID of the event. Can be obtained by using the List Events action.
Object Template IDUUID Or numeric ID of the object template.

​
Example Output

{
	"Object": {
		"id": "<string>",
		"name": "<string>",
		"meta-category": "<string>",
		"description": "<string>",
		"template_uuid": "<string>",
		"template_version": "<string>",
		"event_id": "<string>",
		"uuid": "<string>",
		"timestamp": "1744896602",
		"distribution": "<string>",
		"sharing_group_id": "<string>",
		"comment": "<string>",
		"deleted": false,
		"first_seen": null,
		"last_seen": null,
		"Attribute": [
			{
				"id": "<string>",
				"event_id": "<string>",
				"object_id": "<string>",
				"object_relation": "<string>",
				"category": "<string>",
				"type": "<string>",
				"value1": "<string>",
				"value2": "<string>",
				"to_ids": true,
				"uuid": "<string>",
				"timestamp": "<string>",
				"distribution": "<string>",
				"sharing_group_id": "<string>",
				"comment": "<string>",
				"deleted": false,
				"disable_correlation": false,
				"first_seen": null,
				"last_seen": null,
				"value": "<string>"
			},
			{
				"id": "<string>",
				"event_id": "<string>",
				"object_id": "<string>",
				"object_relation": "<string>",
				"category": "<string>",
				"type": "<string>",
				"value1": "<string>",
				"value2": "<string>",
				"to_ids": true,
				"uuid": "<string>",
				"timestamp": "1744896602",
				"distribution": "<string>",
				"sharing_group_id": "<string>",
				"comment": "<string>",
				"deleted": false,
				"disable_correlation": false,
				"first_seen": null,
				"last_seen": null,
				"value": "<string>"
			}
		]
	}
}

​
Workflow Library Example

Add Object with Misp and Send Results Via Email

Preview this Workflow on desktop