Hey Alexander - i finally got things working. However, I noticed that email alerts are being generated after an event is published. I looked at the part of the code and the call should have the alerts suppresed. I will also try to reposition that call somewhere in the code such that it completes all entries to an event before publishing. As it is a single event gets published multiple times in a single pull.
Lastly, publish the event without sending an alert email.
# This command expects the event ID instead of a MISPevent as argument.
misp_instance.publish(event['id'], alert=False)
thanks for your help.
Doug
Hey Alexander - i finally got things working. However, I noticed that email alerts are being generated after an event is published. I looked at the part of the code and the call should have the alerts suppresed. I will also try to reposition that call somewhere in the code such that it completes all entries to an event before publishing. As it is a single event gets published multiple times in a single pull.
Lastly, publish the event without sending an alert email.
thanks for your help.
Doug