Add an object to an event.
External DocumentationTo learn more, visit the MISP documentation.

​
Parameters

ParameterDescription
AttributeAttributes of the object.
Example:
[
  {
    “category”: “Internal reference”,
    “value”: “127.0.0.1”,
    “to_ids”: true,
    “disable_correlation”: false,
    “distribution”: “0”,
    “comment”: “logged source ip”,
    “object_relation”: “sensor”
  }
]
Event IDUUID or numeric ID of the event. Can be obtained by using the List Events action.
Object Template IDUUID Or numeric ID of the object template.

​
Example Output

{
	"Object": {
		"id": "<string>",
		"name": "<string>",
		"meta-category": "<string>",
		"description": "<string>",
		"template_uuid": "<string>",
		"template_version": "<string>",
		"event_id": "<string>",
		"uuid": "<string>",
		"timestamp": "1744896602",
		"distribution": "<string>",
		"sharing_group_id": "<string>",
		"comment": "<string>",
		"deleted": false,
		"first_seen": null,
		"last_seen": null,
		"Attribute": [
			{
				"id": "<string>",
				"event_id": "<string>",
				"object_id": "<string>",
				"object_relation": "<string>",
				"category": "<string>",
				"type": "<string>",
				"value1": "<string>",
				"value2": "<string>",
				"to_ids": true,
				"uuid": "<string>",
				"timestamp": "<string>",
				"distribution": "<string>",
				"sharing_group_id": "<string>",
				"comment": "<string>",
				"deleted": false,
				"disable_correlation": false,
				"first_seen": null,
				"last_seen": null,
				"value": "<string>"
			},
			{
				"id": "<string>",
				"event_id": "<string>",
				"object_id": "<string>",
				"object_relation": "<string>",
				"category": "<string>",
				"type": "<string>",
				"value1": "<string>",
				"value2": "<string>",
				"to_ids": true,
				"uuid": "<string>",
				"timestamp": "1744896602",
				"distribution": "<string>",
				"sharing_group_id": "<string>",
				"comment": "<string>",
				"deleted": false,
				"disable_correlation": false,
				"first_seen": null,
				"last_seen": null,
				"value": "<string>"
			}
		]
	}
}

​
Workflow Library Example

Add Object with Misp and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop