GreyNoise Quick IP Lookup Data Adapter
GreyNoise Quick IP Lookup provides quick insights into the activities associated with IP addresses, helping to filter out known benign IP addresses from security monitoring and threat detection systems.
For information on the GreyNoise data adapter for Graylog Enterprise, see GreyNoise Full IP Lookup Data Adapter.
Prerequisites
Before proceeding, ensure that the following prerequisites are met:
-
You must have a GreyNoise Enterprise subscription.
-
You will need GreyNoise API access. You can obtain API access credentials from GreyNoise. Also, you will need an API key to authenticate your requests.
Configure the Data Adapter
You can create a data adapter during the lookup table creation workflow, or they can be created separately on the Data Adapters tab. The following configuration options are available for this data adapter:
|
Title |
A short and unique title for this data adapter. |
|
Description |
Data adapter description. |
|
Name |
The name used to refer to this data adapter. This should be something unique and recognizable within your Graylog environment. |
|
Custom Error TTL |
Time-to-live for custom error messages in seconds. This controls how long custom error responses are cached. If no value is specified, the default is 5 seconds. |
|
API Token |
This token is used to authenticate your requests to the GreyNoise API. It must belong to an account with a GreyNoise Enterprise subscription. |
Further Reading
Explore the following additional resources and recommended readings to expand your knowledge on related topics:
