Back to Documentation

Soltra Edge Publish

Soltra Edge provides a feature that allows the Soltra Edge admin or user to create and publish a feed of specifically identified threat intelligence data. This data can be shared with a group of users or shared with specific people.

To access Publish select “Publish” in the navigation bar.

 

 

How to Publish a Feed

Select the “Add” button.

 

 

When adding a feed, you are provided a menu of options you can use for filtering what data you want in the feed you are creating.

 

 

Search Types

 

 

"Search Types" allows you to dictate what object type you are wanting to see in your feed. You can select as many object types as desired. At least one main object type must be selected.

 

Common Filters

 

 

"Common Filters" apply to all objects. These are filters like seeing only objects of a TLP level, only obejcts that have specific Handling Caveats, only objects submited by a Username, or only objects submitted by an Organization.

Please note the following

  • Not selecting a common filter means your feed will show you everything, unfiltered
  • The Organization filter "None" is a deafult Organization on your appliance, not a literal none filter. 

 

Indicator Filters

 

 

"Indicator Filters" apply to indicator type objects only. 

 

Related Objects

The “Related Objects” option by default pre-selects all related objects to be included in your created feed. These are objects that have a STIX relationship with the object being polled.

 

 

Date Range

 

 

Date Range provides the time and date parameters to which the feed will filter objects. This can include Since Last Pull, Date Offset, or Date Range. Please note, Date/Time parameters may be overridden by TAXII clients. 

 

Security

The “Security” menu option allows the feed creator to determine with whom a feed will be shared, via sharing with all, choosing a username, or sharing with a Trustgroup.

 

 

 

ISA ACS

For government use only. If selected, only objects with the specified ISA ACS markings will be included. 

 

 

Name the feed

Provide a name for your feed. Once you type in a name for the feed, select the blue “apply” button.

 

 

Your created feed will be shown as follows.

 

 

Click on the blue feed name and you will see the results of the created feed.

 

 

Editing a created Feed

To edit a feed, click the orange "Edit" icon next to your feed name.

 

 

Edit the fields you want to change and select the blue “Apply” button.

 

 

Deleting a Feed

To delete a feed, from the main “Publish” page, select the red "X" next to the feed you want removed.

 

 

 

For more information, join the conversation in the Soltra Edge Forums at forums.soltra.com.