Current ThreatQ Version Filter
Connecting to a Publisher
Default ThreatQ Role: Administrative or Maintenance
Custom Role - Action Permissions: Data Exchange - Edit Data Exchange Feeds
As a subscriber, you can connect to a publisher to receive data feeds that have been shared your instance by the publisher. You can also create your own data feed to be shared with the publisher.
Subscribers can only connect to a single publisher and cannot connect to another subscriber instance. Subscribers have the option of deleting the current connection they have with a publisher in order to connect with a different publisher.
- Click on the Data Exchange menu option and select the OpenDXL Set Up Server option.
The Connect to Data Exchange wizard will load.
- Enter a name for your instance in the field provided. This name is what you will see your instance as in your node view. This name does not affect the publisher's view.
- Click on Next.
The Connect to Transport screen will load.
- Optional - update the UI name for the Data Transport or leave the default - OpenDXL Broker. This name is what you will see the transport as in your node view and does not affect the publisher's view.
- Upload the connection bundle from the publisher by either:
- Clicking on the file and dragging it into the window
- Using the click to browse option to select the file from your local machine.
- Click on Finish Setup.
You will now be connected to the publisher and can now subscribe to the data feeds offered by that publisher.