Merge pull request #416 from arvchristos/intelmq_disable_correlation

Disable correlation for IntelMQ time fields
MISP · Mar 6, 2024 · 1c1e395 · 1c1e395
2 parents 173af55 + a367c43
commit 1c1e395
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/objects/intelmq_event/definition.json b/objects/intelmq_event/definition.json
@@ -405,11 +405,13 @@
     },
     "time.observation": {
       "description": "The time the collector of the local instance processed (observed) the event.",
+      "disable_correlation": true,
       "misp-attribute": "datetime",
       "ui-priority": 1
     },
     "time.source": {
       "description": "The time of occurence of the event as reported the feed (source).",
+      "disable_correlation": true,
       "misp-attribute": "datetime",
       "ui-priority": 1
     },

diff --git a/objects/intelmq_report/definition.json b/objects/intelmq_report/definition.json
@@ -47,6 +47,7 @@
     },
     "time.observation": {
       "description": "The time the collector of the local instance processed (observed) the event.",
+      "disable_correlation": true,
       "misp-attribute": "datetime",
       "ui-priority": 1
     }