I am having some issue with the synchronization between two misp instances.
Is it possible to:
I have read on MISP/MISP#5570 that "A MISP server where an event originated (either by hand or API or import) will not accept changes made to that event by another MISP server. This is by design to avoid remote servers to mess with local data."
But is there no way at all to synchronize two MISP instances?
I am developing a project to implement the MISP and I would like to know if exist a suggestion of a minimum size setup to use MISP in production?
I believe that using a MISP-sizer should be the best option, but I can not understand about “Number of users” and “number of attributes”. Anyone could help with this?
Number of users = should be people + integrated systems?
Number of attributes/Field values = ????