Current ThreatQ Version Filter
Editing Object Default Statuses
Default ThreatQ Role: Administrative or Maintenance
Custom Role - Action Permissions: Data Exchange - Edit Data Exchange Feeds
When you first subscribe to a data feed, you are prompted to select the default status of objects that are ingested. You can also update the default status that is assigned to threat data ingested by an incoming feed from the Feed Ingestion Settings page.
- Click on the Data Exchange menu link and select Data Feeds.
The OpenDXL Data Feeds page will load.
- Click on a feed under the Incoming Feeds heading.
The Feed Ingestion Settings page will load.
- Use the dropdown menus provided to update the default status assigned to the objects as they are ingested from the data feed.
You can also select Retain Existing to keep the status assigned to the object in the data feed.