Integrate with OpenCTI


The OpenCTI Feedly connector allows you to import data from Feedly boards and folders. The connector leverages the Feedly API to retrieve the latest articles, and ingest them in OpenCTI with the relevant entities, indicators, detection rules, and relationships between the entities mentioned.

Note: to use the OpenCTI connector, you must have a Feedly Enterprise Advanced Plan.

You can find the Feedly connector here: https://github.com/OpenCTI-Platform/connectors/tree/master/external-import/feedly


Installation

  1. Generate a Feedly token
    1. Go to this page
    2. Click on NEW API TOKEN to generate a Feedly API key
  2. Find the Feedly stream ids For each stream (board/folder) you want to integrate with OpenCTI, you can find its stream id by:
    1. Selecting the stream
    2. Clicking on the 3 dots ... at the top right of the page
    3. Clicking on Sharing
    4. Clicking on Copy ID in the Feedly API Stream ID section.
  3. Generate an OpenCTI token
    1. Create a new user with the name [C] Name of the connector  in Settings > Security > Users.

    2. Go to the user you have just created and add it to the Connectors group.

    3. Get the token from the user displayed in the interface.

  4. Deploy the connectorIf you used Docker to deploy OpenCTI:
    1. Copy the container from this file: https://github.com/OpenCTI-Platform/connectors/blob/master/external-import/feedly/docker-compose.yml
    2. Paste it into your docker-compose file
    3. Fill the configuration (see below)
    4. Re-deploy OpenCTI

      If you deployed OpenCTI another way Find your use case on this guide: https://docs.opencti.io/latest/deployment/connectors/


Configuration

Here are the main parameters of the connector:

Parameter Docker envvar Mandatory Description
opencti_url OPENCTI_URL Yes The URL of the OpenCTI platform.
opencti_token OPENCTI_TOKEN Yes The default admin token configured in the OpenCTI platform parameters file.
connector_id CONNECTOR_ID Yes A valid arbitrary UUIDv4 that must be unique for this connector.
feedly_source_ids FEEDLY_SOURCE_IDS Yes A comma separated list of source ids you want to integrate
feedly_api_key FEEDLY_API_KEY Yes The API key of your Feedly account, to generate here https://feedly.com/i/team/api
feedly_days_to_back_fill FEEDLY_DAYS_TO_BACK_FILL Yes The number of days to back fill for new stream ids
feedly_interval FEEDLY_INTERVAL Yes The interval (in minutes) between each run

Requirements

  • OpenCTI Platform >= 5.9.6
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.