Enricher - OpenResolve


This article describes the specific configuration options to set up the enricher.
To configure the general options for the enricher, see Configure the general options.

Specifications

Enricher name

OpenResolve

Input

Domain, host, and IP addresses (ipv4 and ipv6).

Output

Enriches supported observable types with reverse-DNS lookup information.

API endpoint

http://api.openresolve.com/

Description

OpenResolve by Cisco OpenDNS offers a REST API to use DNS resolvers and to retrieve reverse-DNS lookup information.

The OpenDNS OpenResolve enricher has no specific parameters to configure.
If the REST API returns 404 or a 5xx HTTP status code, the enricher handles the exception as a response returning no data.

Configure the enricher parameters

  1. Edit the enricher.

  2. From the Observable types drop-down menu, select one or more observable types you want to enrich with data retrieved through the OpenDNS OpenResolve enricher.

  3. The API URL field is automatically filled in with the default domain for the endpoint.
    You can add a proxy or set up ports according to your needs.
    Default value: https://api.openresolve.com.

  4. To store your changes, click Save; to discard them, click Cancel.

See also