Analyze Threat Bulletin Failures
Sometimes there may be failures while publishing a threat bulletin such as the collections are disabled, the client server is not reachable, or the collections are not enabled for inbox or polling and so on. Analysts can view and analyze these failures and resubmit the bulletin.
Navigate to Main Menu and select Threat Bulletin under Collections.
Check the Status to see the status of the bulletin.
Draft - The threat bulletin is in draft state and is not published.
Published - The threat bulletin is published successfully. All the objects are successfully published.
Partially Successful - The threat bulletin is partially published. Some objects are published and some are not.
Processing - The intel publishing is in progress.
Failed - The intel is not published and it failed completely. None of the objects submitted were published.
To view failure logs for a Partially Successful or Failed bulletin, click the vertical ellipsis, and select Download Log.
For partially successful submissions, you can clone the bulletin, fix any issues and attempt to publish it again. For information about cloning a threat bulletin, see Clone a Threat Bulletin.