def request_replay(index, doc_id, **kwargs):
"""
Request an alert or a submission to be transfered to another system
Variables:
index => Type of document to be transfered (alert or submission)
doc_id => ID of the document to transfer
Arguments:
None
Data Block:
None
Result example:
{"success": true}
"""
user = kwargs['user']
if index not in ['alert', 'submission']:
return make_api_response(
"", f"{index.upper()} is not a valid index for this API.", 400)
index_ds = STORAGE.get_collection(index)
doc = index_ds.get_if_exists(doc_id, as_obj=False)
if not doc or not Classification.is_accessible(user['classification'],
doc['classification']):
return make_api_response(
"",
f"You are not allowed to modify the {index} with the following ID: {doc_id}",
403)
operations = [(index_ds.UPDATE_SET, 'metadata.replay', REPLAY_REQUESTED)]
return make_api_response({'success': index_ds.update(doc_id, operations)})
def set_bulk_replay_pending(**kwargs):
"""
Set the replay pending state on alert or submissions maching the queries
Variables:
None
Arguments:
None
Data Block:
{
"index": "alert", # Target index (alert or submission)
"query": "*:*", # Main query
"filter_queries": [], # List of filter queries
"max_docs": 100 # Maximum amount of document to change
}
Result example:
{"success": true}
"""
user = kwargs['user']
data = request.json
index = data.get('index', None)
query = data.get('query', None)
fqs = data.get('filter_queries', None)
max_docs = data.get('max_docs', None)
if index is None or query is None or fqs is None or max_docs is None:
return make_api_response("", "Invalid data block.", 400)
if index not in ['alert', 'submission']:
return make_api_response(
"", f"{index.upper()} is not a valid index for this API.", 400)
index_ds = STORAGE.get_collection(index)
operations = [(index_ds.UPDATE_SET, 'metadata.replay', REPLAY_PENDING)]
return make_api_response({
'success':
True,
"count":
index_ds.update_by_query(query,
operations,
filters=fqs,
max_docs=max_docs,
access_control=user['access_control'])
})