Misp-lite OpenSearch integration

righel · April 9, 2025, 11:57am

New Features in misp-Lite: Enhanced OpenSearch Integration

We’ve just rolled out some new features in MISP-Lite to make threat intelligence even more accessible and actionable:

Improved OpenSearch Integration

Added index mappings for better data structure.
Included ingest pipelines for automatic IP extraction and GeoIP enrichment.

Event & Attribute Explorer

Explore your data using Lucene query language, powered by OpenSearch for lightning-fast search.

Visual Insights

Get started quickly with a sample OpenSearch dashboard and basic visualizations to monitor trends and spot anomalies.

New OpenSearch dashboard:

Attribute search:

Event search:

github.com/flowintel/misp-lite

event and attributes search (opensearch)

main ← event-search

opened 10:56AM - 26 Mar 25 UTC

righel

+996 -45

* Improve integration with OpenSearch: * Include index mappings * Ingest p…ipelines for ip extraction and geoip * Event/Attribute explorer using Lucene query language with OpenSearch backend * Add sample OpenSearch dashboard and basic vistualizations. **OpenSearch dashboard:** ![image](https://github.com/user-attachments/assets/ea490729-1828-40e4-897e-a322d990b5fb) **Attributes search:** ![image](https://github.com/user-attachments/assets/23d739ef-a9f2-4520-ada6-91f1a0141efa) **Events search:** ![image](https://github.com/user-attachments/assets/4f251f98-63da-43bf-878f-3f77fe7e2eb0)