Пример #1
0
 def forward(node_name, return_none=False):
     """
     Forwards a request to a node.
     :param node_name: Node to forward a request to.
     :param return_none: Whether to return an error message or nothing (if there's an error forwarding the request).
     :return: a JSON response
     """
     if node_name == 'unknown' or node_name == '':
         # if the agent is never connected or pending (i.e. its node name is unknown or empty), do the request locally
         response = json.loads(distribute_function(input_json))
     else:
         # if not, check if the node the request is being forwarded to is the master or a worker.
         command = 'dapi_forward {}'.format(
             node_name) if node_name != master_name else 'dapi'
         if command == 'dapi':
             # if it's the master, execute the request directly
             response = json.loads(
                 distribute_function(input_json, debug=debug))
         else:
             # if it's a worker, forward it
             response = i_s.execute(
                 '{} {}'.format(command, json.dumps(input_json)),
                 input_json['arguments']['wait_for_complete'])
             if not isinstance(response, dict):
                 # If there's an error and the flag return_none is not set, return a dictionary with the response.
                 response = {
                     'error': 3016,
                     'message': str(WazuhException(3016, response))
                 } if not return_none else None
     return response
Пример #2
0
def execute_remote_request(input_json, pretty):
    """
    Executes a remote request. This function is used by worker nodes to execute master_only API requests.

    :param input_json: API request to execute. Example: {"function": "/agents", "arguments":{"limit":5}, "ossec_path": "/var/ossec", "from_cluster":false}
    :param pretty: JSON pretty print
    :return: JSON response
    """
    response = i_s.execute('dapi {}'.format(json.dumps(input_json)), input_json['arguments']['wait_for_complete'])
    data, error = __split_response_data(response)
    return print_json(data=data, pretty=pretty, error=error)
Пример #3
0
def get_nodes(filter_list_nodes=None):
    request = "get_nodes {}"
    nodes = execute(request)

    if nodes.get("err"):
        response = nodes
    else:
        response = {"items": {}, "node_error": []}
        response["items"] = {
            node: node_info
            for node, node_info in nodes.items()
            if not filter_list_nodes or node in filter_list_nodes
        }
        if filter_list_nodes:
            response["node_error"] = [
                node for node in filter_list_nodes
                if node not in response["items"]
            ]
    return response
Пример #4
0
def get_agents(filter_status, filter_node, is_master):
    filter_status = ["all"] if not filter_status else filter_status
    filter_node = ["all"] if not filter_node else filter_node

    if is_master:
        return Agent.get_agents_overview(
            limit=None,
            filters={
                'status': ','.join(filter_status),
                'node_name': ','.join(filter_node)
            },
            select={'fields': ['id', 'ip', 'name', 'status', 'node_name']})
    else:
        input_json = {
            'function': '/agents',
            'from_cluster': False,
            'arguments': {
                'filters': {
                    'status': ','.join(filter_status),
                    'node_name': ','.join(filter_node)
                },
                'limit': None,
                'select': {
                    'fields': ['id', 'ip', 'name', 'status', 'node_name']
                }
            }
        }

        request = "dapi {}".format(json.dumps(input_json))
        response = execute(request)
        if response.get('err'):
            raise Exception(response['err'])

        if response['error'] == 0:
            return response['data']
        else:
            raise WazuhException(response['error'], response['message'])
Пример #5
0
def get_nodes_api(filter_node=None,
                  filter_type=None,
                  offset=0,
                  limit=common.database_limit,
                  sort=None,
                  search=None,
                  select=None):
    request = "get_nodes {}"
    nodes = execute(request)

    if nodes.get("err"):
        raise WazuhException(3016, "{}".format(nodes['err']))

    valid_select_fiels = {"name", "version", "type", "ip"}
    valid_types = {"worker", "master"}
    select_fields_param = {}

    if select:
        select_fields_param = set(select['fields'])
        if not select_fields_param.issubset(valid_select_fiels):
            incorrect_fields = select_fields_param - valid_select_fiels
            raise WazuhException(1724, "Allowed select fields: {0}. Fields {1}".\
                    format(', '.join(list(valid_select_fiels)), ', '.join(incorrect_fields)))
    if filter_type:
        if not filter_type in valid_types:
            raise WazuhException(
                1728, "{0} is not valid. Allowed types: {1}.".format(
                    filter_type, ', '.join(list(valid_types))))

    response = {"items": [], "totalItems": 0}
    for node, data in nodes.items():
        if (filter_node and node != filter_node) or (
                filter_type and data['type'] not in filter_type):
            continue
        if select:
            filtered_node = {}
            for field in select_fields_param:
                filtered_node.update({field: data[field]})
        else:
            filtered_node = data
        response["items"].append(filtered_node)

    if filter_node:
        if len(response["items"]):
            return response["items"][0]
        else:
            raise WazuhException(1730, "{0}.".format(filter_node))

    if search:
        response["items"] = search_array(
            response['items'],
            search['value'],
            search['negation'],
            fields=['name', 'type', 'version', 'ip'])
    if sort:
        response["items"] = sort_array(response['items'], sort['fields'],
                                       sort['order'])

    response["totalItems"] = len(response["items"])

    if limit:
        response["items"] = cut_array(response["items"], int(offset),
                                      int(limit))

    return response
Пример #6
0
def get_healthcheck(filter_node=None):
    request = "get_health {}".format(filter_node)
    return execute(request)