{"action":"created","issue":{"url":"https://api.github.com/repos/certtools/intelmq/issues/185","labels_url":"https://api.github.com/repos/certtools/intelmq/issues/185/labels{/name}","comments_url":"https://api.github.com/repos/certtools/intelmq/issues/185/comments","events_url":"https://api.github.com/repos/certtools/intelmq/issues/185/events","html_url":"https://github.com/certtools/intelmq/issues/185","id":81877174,"number":185,"title":"DataHarmonization Document improvements","user":{"login":"Phantasus","id":1078087,"avatar_url":"https://avatars.githubusercontent.com/u/1078087?v=3","gravatar_id":"","url":"https://api.github.com/users/Phantasus","html_url":"https://github.com/Phantasus","followers_url":"https://api.github.com/users/Phantasus/followers","following_url":"https://api.github.com/users/Phantasus/following{/other_user}","gists_url":"https://api.github.com/users/Phantasus/gists{/gist_id}","starred_url":"https://api.github.com/users/Phantasus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Phantasus/subscriptions","organizations_url":"https://api.github.com/users/Phantasus/orgs","repos_url":"https://api.github.com/users/Phantasus/repos","events_url":"https://api.github.com/users/Phantasus/events{/privacy}","received_events_url":"https://api.github.com/users/Phantasus/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/certtools/intelmq/labels/documentation","name":"documentation","color":"5319e7"},{"url":"https://api.github.com/repos/certtools/intelmq/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":23,"created_at":"2015-05-28T10:58:32Z","updated_at":"2015-08-26T11:02:13Z","closed_at":null,"body":"Hi,\r\n\r\nthe DataHarmonization document needs some improvements:\r\n\r\n1. When looking at it in a browser the table is too big to be actually displayed in a browser window.\r\n2. The document itself isn't so clearly understandable. e.g When to prefix a key with reported? When not? How is someone supposed to add a new field? Like http method? Should that then be reported_http_method?\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/certtools/intelmq/issues/comments/134948921","html_url":"https://github.com/certtools/intelmq/issues/185#issuecomment-134948921","issue_url":"https://api.github.com/repos/certtools/intelmq/issues/185","id":134948921,"user":{"login":"SYNchroACK","id":4184292,"avatar_url":"https://avatars.githubusercontent.com/u/4184292?v=3","gravatar_id":"","url":"https://api.github.com/users/SYNchroACK","html_url":"https://github.com/SYNchroACK","followers_url":"https://api.github.com/users/SYNchroACK/followers","following_url":"https://api.github.com/users/SYNchroACK/following{/other_user}","gists_url":"https://api.github.com/users/SYNchroACK/gists{/gist_id}","starred_url":"https://api.github.com/users/SYNchroACK/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SYNchroACK/subscriptions","organizations_url":"https://api.github.com/users/SYNchroACK/orgs","repos_url":"https://api.github.com/users/SYNchroACK/repos","events_url":"https://api.github.com/users/SYNchroACK/events{/privacy}","received_events_url":"https://api.github.com/users/SYNchroACK/received_events","type":"User","site_admin":false},"created_at":"2015-08-26T11:02:13Z","updated_at":"2015-08-26T11:02:13Z","body":"@sebix agreed. 'extra' field should be add to harmonization.conf\r\n\r\nso, if some feed has the 'zzz' and 'yyy' fields, the intelmq should suppor the following harmonization:\r\n```\r\n    \"extra.zzz\": {\r\n      \"type\": \"String\",\r\n      \"description\": \"<description>\"\r\n    }\r\n    \"extra.yyy\": {\r\n      \"type\": \"String\",\r\n      \"description\": \"<description>\"\r\n    }\r\n\r\n```"}}