fixing pagination for MISP module (#31784)

* fixing pagination for MISP module * Update changelog * Update changelog * Update CHANGELOG.next.asciidoc
elastic · Jun 23, 2022 · bdebc44 · bdebc44
1 parent 3489e24
commit bdebc44
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -50,6 +50,7 @@ https://github.com/elastic/beats/compare/v8.2.0\...main[Check the HEAD diff]
 - Do not emit error log when filestream reader reaches EOF and `close.reader.on_eof` is enabled. {pull}31109[31109]
 - sophos.xg: Update module to handle new log fields. {issue}31038[31038] {pull}31388[31388]
 - Fix MISP documentation for `var.filters` config option. {pull}31434[31434]
+- Adding a fix for threatintel module where MISP was paginating forever. {pull}31784[31784]
 - Fix type mapping of client.as.number in okta module. {pull}31676[31676]
 - Fix last write pagination commit checkpoint on `aws-s3` input for s3 direct polling when using the same bucket and different list prefixes. {pull}31776[31776]
 - If a file is ignored by `filestream` because of ignore_older settings, when it is updated, only the new lines are shipped to the output. {issue}31924[31924] {pull}31972[31972]

diff --git a/x-pack/filebeat/module/threatintel/misp/config/config.yml b/x-pack/filebeat/module/threatintel/misp/config/config.yml
@@ -51,7 +51,7 @@ response.request_body_on_pagination: true
 response.pagination:
 - set:
     target: body.page
-    value: '[[add .last_response.page 1]]'
+    value: '[[if (ne (len .last_response.body.response) 0)]][[add .last_response.page 1]][[end]]'
     fail_on_template_error: true
 cursor:
   timestamp: