Skip to content

Update GreyNoise Community IP Lookup Adapter #957

@roberto-graylog

Description

@roberto-graylog

Description

Update the Greynoise Community IP Lookup Adapter per meeting with Greynoise

What

Per meeting with Greynoise, we discovered that we can suppress the 'message' field in the response, as it has no value for the end user, and we should only query valid IPv4 addresses.

Further, we can remove the version from the User Agent.

Why

These changes were recommended by Greynoise for better user results as well as to reduce queries with IP addresses that not valid (e.g. reserved addresses, IPv6).

Metadata

Metadata

Labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions