def post_to_http_source(self, joined_results):
     """
     Posts joined_results to a collector in Sumo sumologic
     Input:
         joined_results (List)            : query_results with abuseIPDB results joined into each dictionary
     Return (None):
         Posts joined_results to specified selector
     """
     if self.postAuthorization is True:
         sumo_api_post = SumoLogic(
             self.sumo_access_id,
             self.sumo_access_key,
             endpoint=
             "https://endpoint1.collection.us2.sumologic.com/receiver/v1/http/"
         )
         post_object = sumo_api_post.post(self.uniqueHTTPCollectorCode,
                                          joined_results)
         print('\n')
         print(post_object)
     else:
         print("\nPost authorization disabled.\n")
Exemple #2
0
def addCollector():

    data = request.json
    sumo = SumoLogic(data["apiid"], data["apikey"])
    response = {"errors": [], "success": []}

    params = {}
    remove = ("apiid", "apikey", "collectors", "selected")
    for key in data.keys():
        if key not in remove:
            params[key] = data[key]

    # Convert boolean string to booleans
    payload = {"source": fixBooleans(params)}

    for collector in data["collectors"]:
        endpoint = "/collectors/%s/sources" % collector["id"]
        response = sumo.post(endpoint, payload)
        sleep(0.15)

    # TODO: actually return useful information
    return jsonify(results=response)