- What do I do if I’ve entered the wrong configuration information for TAXII?
- If you enter and save the wrong information into a configuration for TAXII, and then run it, the “red” text indicates that there is an error. However, even if you re-enter the correct information, the same “red” text will persist. This is a known Darktrace issue. You must check the backend service that polls for data to know that the feed is definitely working (you will likely need DT engineers to perform this task - they can monitor live data feeds that you cannot see). Or, you can delete the incorrect entry and redo the task. The “red” text should go away on the next polling task.
- I’m encountering a 500 error in my Darktrace integration. What does that mean?
- It is possible that the integration can present a 500 error. This is due to Darktrace being unable to perform the tasks needed to poll TAXII. Contact Darktrace support.
- I'm running an older version of Darktrace and have changed the config, now Darktrace is not polling Recorded Future for data correctly. What do I do?
- If you have edited the config on older versions of Darktrace, it might not start polling correctly, even if it's been entered correctly. This has been amended in new versions and you would need to upgrade Darktrace to fix this. The workaround is to go to the main dashboard screen, click on the timezone location (e.g., London), change this to something else (it doesn't matter the location) click off the screen to save the input, and then re-click the timezone location to change it back to your client location.