module_version: 1.0

var:
  - name: input
    default: httpjson
  - name: first_interval
    default: 168h
  - name: interval
    default: 1m
  - name: url
    default: "https://api.recordedfuture.com/v2/ip/search?limit=200&fields=entity,timestamps,risk,intelCard,location&metadata=false"
  - name: ssl
  - name: tags
    default: [threatintel-recordedfuture, forwarded]
  - name: proxy_url
  - name: api_token
  - name: preserve_original_event
    default: false
ingest_pipeline:
  - ingest/pipeline.yml
input: config/config.yml
