Current ThreatQ Version Filter
Pagination Support
When you create and enable a new input, the initial import of ThreatQ data will be performed using the pagination feature, which imports a maximum of 10,000 records at once.
This is the default behavior whenever a new input is created.
After the initial import is complete, the import will revert to the differential method of pulling data.
The commands below are CLI alternatives to the Pull All Indicators Input configuration option when creating a new Input.
| Action | Command |
|---|---|
| View the pagination setting for each input |
curl -k -u username:password https://localhost:8089/servicesNS/n obody/TA-threatquotient-add- on/storage/collections/data/TA_ threatquotient_add_on_checkpointer
|
| Update the pagination setting for an input |
curl -k -u username:password https://localhost:8089/servicesNS/n obody/TA-threatquotient-add- on/storage/collections/data/TA_ threatquotient_add_on_checkpointer/ {input_name} -H 'Content-Type: application/json' -d '{"state" : " {\"pull_all_iocs\": true|false}"}'
|
| Add a pagination setting for an input |
curl -k -u user:password https://localhost:8089/servicesNS/n obody/TA-threatquotient-add- on/storage/collections/data/TA_ threatquotient_add_on_checkpointer -H 'Content-Type: application/json' -d '{"_key": "<input_name>", "state" : "{\"pull_all_iocs\": <true|false>}"}'
|
| Delete the pagination setting for an input |
curl -k -u username:password -X DELETE https://localhost:8089/servicesNS/n obody/TA-threatquotient-add- on/storage/collections/data/TA_ threatquotient_add_on_checkpointer/ {input_name}
|
|
Whenever a new input is created, the pagination setting ( |
|