1
Intrusion Detection and Prevention / Re: ET Pro Telemetry rules not loading
« on: December 19, 2022, 05:56:10 pm »
Replying for future reference for the community:
The manual states that first the ET Telemetry Token needs to be registered, so paste that into the token field and hit "SAVE" first.
Only afterwards, the updated&download button
(verify that you've got the token in the code by command: grep 'et_telemetry.token' /usr/local/etc/suricata/rule-updater.config). If after a page reload the token is not there, then there is an error (which you can confirm by the following command: configctl template reload OPNsense/IDS).
Mine showed OK and with the SAVE button it was good.
The manual states that first the ET Telemetry Token needs to be registered, so paste that into the token field and hit "SAVE" first.
Only afterwards, the updated&download button
(verify that you've got the token in the code by command: grep 'et_telemetry.token' /usr/local/etc/suricata/rule-updater.config). If after a page reload the token is not there, then there is an error (which you can confirm by the following command: configctl template reload OPNsense/IDS).
Mine showed OK and with the SAVE button it was good.