Incoming feed - Twitter#

Note

This article describes how to configure incoming feeds for a particular feed source. To see how to configure incoming feeds in general, see Create and configure incoming feeds.


Specifications

Transport type

X (Twitter) User Tweets Feed

Content type

Twitter JSON V2

Twitter Usernames

Comma-separated list of Twitter usernames to monitor (e.g., cyb3rops, threatintel, sans_isc). The @ symbol is optional.

Bearer Token

Bearer Token for X (Twitter) API v2 authentication.

Start ingesting from

Fetch tweets created after this date/time. Default: 30 days ago from current time.

Max results per request

Provide the maximum number of tweets to fetch per API request (10-100). Default: 100

Free Tier API

Enable this if using X API Free tier (1 request per 15 minutes). This will disable pagination to avoid rate limits.

Ingested data

Retrieves messages as Report Entities

Processed data

Reports with related Observables.

Description

Retrieve and process information from configured twitter handles

Configure the incoming feed#

  1. Create an Incoming feed.

  2. From the Transport type drop-down menu, select X (Twitter) User Tweets Feed.

  3. From the Content type drop-down menu, select Twitter JSON V2.

  4. In the Twitter Usernames field, enter your twitter handle names.

  5. In the Bearer Token field, enter your Twitter bearer token for authentication.

  6. Select the Start ingesting from field, use the drop-down calendar to select a start date, and set a start time. The feed will fetch content from the stream starting from the time you specified.

  7. Enable Free Tier API field, if using X API Free tier (1 request per 15 minutes). This will disable pagination to avoid rate limits.

  8. To store your changes, select Save.