{"action":"created","issue":{"url":"https://api.github.com/repos/certtools/intelmq/issues/185","labels_url":"https://api.github.com/repos/certtools/intelmq/issues/185/labels{/name}","comments_url":"https://api.github.com/repos/certtools/intelmq/issues/185/comments","events_url":"https://api.github.com/repos/certtools/intelmq/issues/185/events","html_url":"https://github.com/certtools/intelmq/issues/185","id":81877174,"number":185,"title":"DataHarmonization Document improvements","user":{"login":"Phantasus","id":1078087,"avatar_url":"https://avatars.githubusercontent.com/u/1078087?v=3","gravatar_id":"","url":"https://api.github.com/users/Phantasus","html_url":"https://github.com/Phantasus","followers_url":"https://api.github.com/users/Phantasus/followers","following_url":"https://api.github.com/users/Phantasus/following{/other_user}","gists_url":"https://api.github.com/users/Phantasus/gists{/gist_id}","starred_url":"https://api.github.com/users/Phantasus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Phantasus/subscriptions","organizations_url":"https://api.github.com/users/Phantasus/orgs","repos_url":"https://api.github.com/users/Phantasus/repos","events_url":"https://api.github.com/users/Phantasus/events{/privacy}","received_events_url":"https://api.github.com/users/Phantasus/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/certtools/intelmq/labels/documentation","name":"documentation","color":"5319e7"},{"url":"https://api.github.com/repos/certtools/intelmq/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":17,"created_at":"2015-05-28T10:58:32Z","updated_at":"2015-08-25T12:07:14Z","closed_at":null,"body":"Hi,\r\n\r\nthe DataHarmonization document needs some improvements:\r\n\r\n1. When looking at it in a browser the table is too big to be actually displayed in a browser window.\r\n2. The document itself isn't so clearly understandable. e.g When to prefix a key with reported? When not? How is someone supposed to add a new field? Like http method? Should that then be reported_http_method?\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/certtools/intelmq/issues/comments/134565386","html_url":"https://github.com/certtools/intelmq/issues/185#issuecomment-134565386","issue_url":"https://api.github.com/repos/certtools/intelmq/issues/185","id":134565386,"user":{"login":"sebix","id":199050,"avatar_url":"https://avatars.githubusercontent.com/u/199050?v=3","gravatar_id":"","url":"https://api.github.com/users/sebix","html_url":"https://github.com/sebix","followers_url":"https://api.github.com/users/sebix/followers","following_url":"https://api.github.com/users/sebix/following{/other_user}","gists_url":"https://api.github.com/users/sebix/gists{/gist_id}","starred_url":"https://api.github.com/users/sebix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebix/subscriptions","organizations_url":"https://api.github.com/users/sebix/orgs","repos_url":"https://api.github.com/users/sebix/repos","events_url":"https://api.github.com/users/sebix/events{/privacy}","received_events_url":"https://api.github.com/users/sebix/received_events","type":"User","site_admin":false},"created_at":"2015-08-25T12:07:14Z","updated_at":"2015-08-25T12:07:14Z","body":"Current proposal is to have only one `abuse_contact`. The abusix-expert adds contacts for both source and destination currently. So the abusix bot has to decide which side is to blame based on the classification. This has to be defined before making this proposal final.\r\n\r\nCurrent proposal of fields is here: https://github.com/sebix/intelmq/blob/postgres/docs/Harmonization-fields.md\r\ngenerated from conf-file"}}