class ProxySettings(base.BaseModel):
requiredArgs = {
'proxy_enabled',
}
optionalArgs = {
'proxy_url',
'proxy_port',
'proxy_username',
'proxy_password',
'proxy_rdns',
'proxy_type',
}
encryptedArgs = {
'proxy_password',
}
defaultVals = {
'proxy_enabled': '0',
'proxy_rdns': '0',
'proxy_type': 'http',
}
validators = {
'proxy_enabled':
validator.RequiresIf(
('proxy_url', 'proxy_port'),
lambda val, data: val in ('1', 'true', 'yes'),
),
'proxy_url':
validator.AllOf(
validator.Host(),
validator.RequiresIf(('proxy_port', )),
),
'proxy_port':
validator.AllOf(validator.Port(), validator.RequiresIf(
('proxy_url', ))),
'proxy_type':
validator.Enum(("socks4", "socks5", "http", "http_no_tunnel"), ),
'proxy_username':
validator.AllOf(validator.RequiresIf(('proxy_url', 'proxy_password'))),
'proxy_password':
validator.RequiresIf(('proxy_username', ))
}
normalisers = {
'proxy_enabled': normaliser.Boolean(),
'proxy_rdns': normaliser.Boolean(),
}
outputExtraFields = (
'eai:acl',
'acl',
'eai:attributes',
'eai:appName',
'eai:userName',
)
class NessusInputs(datainput.DataInputModel):
"""REST Endpoint of Server in Splunk Add-on UI Framework.
"""
rest_prefix = 'ta_tenable'
dataInputName = "nessus"
requiredArgs = [
'url',
'access_key',
'secret_key',
'metric',
]
optionalArgs = [
'batch_size',
'start_date',
'index',
'interval',
]
defaultVals = {
'batch_size': '100000',
'start_date': '1999/01/01',
'index': 'default',
'interval': '86400',
}
validators = {'metric': validator.Enum(("nessus_scan", "nessus_plugin"))}
normalisers = {
'disabled': normaliser.Boolean(),
}
cap4endpoint = ''
cap4get_cred = ''
class GlobalSettings(base.BaseModel):
optionalArgs = {
'log_level', 'use_kv_store', 'use_multiprocess', 'use_hec',
'base64encoded'
}
defaultVals = {
'log_level': 'INFO',
'use_kv_store': '1',
'use_multiprocess': '1',
'use_hec': '0',
'base64encoded': '1'
}
validators = {'log_level': validator.Enum(('DEBUG', 'INFO', 'ERROR'))}
normalisers = {
'use_kv_store': normaliser.Boolean(),
'use_multiprocess': normaliser.Boolean(),
'use_hec': normaliser.Boolean(),
'base64encoded': normaliser.Boolean()
}
outputExtraFields = ('eai:acl', 'acl', 'eai:attributes', 'eai:appName',
'eai:userName')
class DefaultInputs(base.BaseModel):
"""REST Endpoint of Server in Splunk Add-on UI Framework.
"""
rest_prefix = 'ta_tenable'
endpoint = "configs/conf-tenable_sc_inputs"
requiredArgs = {'server', 'data', 'index', 'interval'}
optionalArgs = {'start_time', 'batch_size'}
normalisers = {"disabled": normaliser.Boolean()}
defaultVals = {'data': 'sc_vulnerability', 'batch_size': 10000}
cap4endpoint = ''
cap4get_cred = ''