File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/splunk_search.cpython-310.pyc
Back
o ;j# � @ s� d Z ddlZddlZddlmZ ddlZdZz ddl Z ddl Z dZW n e y+ Y nw e� e�ZddiZdZd d � Zd d � Zd d� Zddd�Zddd�Zddd�Zddd�Zddd�Z d dd�ZdS ) a� Module for interop with the Splunk API .. versionadded:: 2015.5.0 :depends: - splunk-sdk python module :configuration: Configure this module by specifying the name of a configuration profile in the minion config, minion pillar, or master config. The module will use the 'splunk' key by default, if defined. For example: .. code-block:: yaml splunk: username: alice password: abc123 host: example.splunkcloud.com port: 8080 � N)� OrderedDictFT�list_�listZ splunk_searchc C s t rtS dS )zF Only load this module if splunk is installed on this minion. )Fz�The splunk_search execution module failed to load: requires both the requests and the splunk-sdk python library to be installed.)�HAS_LIBS�__virtualname__� r r �N/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/splunk_search.py� __virtual__. s r c C st t d | �}d�|�d�|�d�|�d�|�d��}|tvr6tjj|�d�|�d�|�d�|�d�d�t|< t| S )zK Return the splunk client, cached into __context__ for performance � config.optionzsplunk_search.{}:{}:{}:{}�host�port�username�password)r r r r )�__salt__�format�get� __context__� splunklib�client�connect)�profile�config�keyr r r � _get_splunk; s � �r c C s" | j }| jj|d< | jj|d< |S )z5 Get splunk search properties from an object �app�sharing)�content�accessr r )�search�propsr r r �_get_splunk_search_propsP s r �splunkc C s2 t |�}d}z|j| }W |S ty Y |S w )z[ Get a splunk search CLI Example: splunk_search.get 'my search name' N)r �saved_searches�KeyError)�namer r r r r r r Z s ��r c K s� t |�}|j| }t|�}|}d}t� }g } t|�D ]8} |�| d�} |�| d�} t| t�r1| �� } t| t�r:| �� } | | krR| || < d}| � | � d| � d| � d�� q|rc|j di |��� � || fS dS )zm Update a splunk search CLI Example: splunk_search.update 'my search name' sharing=app FNTz: 'z' => '�'r ) r r" r �dict�sortedr � isinstance�str�strip�append�updateZrefresh) r$ r �kwargsr r r ZupdatesZ update_neededZ update_setZdiffsr � old_valueZ new_valuer r r r, l s. �r, c K s� t |�}|jj| fi |��}td |�}d�|�d�|�d��}|�d�|�d�f}|�d�ddd �}d �||�d�tj�| ��} t j | |d |d d � t |�S )zt Create a splunk search CLI Example: splunk_search.create 'my search name' search='error msg' r z https://{}:{}r r r r r �*)�ownerr z perms.readz-{}/servicesNS/{}/search/saved/searches/{}/aclT�x )�authZverify�data�timeout) r r" �creater r r �urllib�parse�quote�requestsZpostr ) r$ r r- r r r �urlr2 r3 Z_req_urlr r r r5 � s ��r5 c C s0 t |�}z |j�| � W dS ty Y dS w )z` Delete a splunk search CLI Example: splunk_search.delete 'my search name' TN)r r" �deleter# )r$ r r r r r r; � s �r; c C s t | �}dd� |jD �}|S )zY List splunk searches (names only) CLI Example: splunk_search.list c S s g | ]}|d �qS �r$ r )�.0�xr r r � <listcomp>� s zlist_.<locals>.<listcomp>)r r" )r r �searchesr r r r � s c C sp t |�}d}z|j�|� W n ty Y nw |jj|dd�}t|j�} |j�|� d} t� } tdd� |jD ��} | D ]q\}}|rI|j j |krIq<|rR|j j |krRq<|rY||v rYq<| re|� | �raq<| | }d|ig} d}t|j� � �D ]*\}}|| v r|qs|� d �r�qs|s�qs|| v r�| | |kr�qs| �||i� |d kr�|}qs|r�||vr�q<d | i| d | < q<tjjj| d dd�S )ar Get all splunk search details. Produces results that can be used to create an sls file. if app or owner are specified, results will be limited to matching saved searches. if description_contains is specified, results will be limited to those where "description_contains in description" is true if name_not_contains is specified, results will be limited to those where "name_not_contains not in name" is true. If prefix parameter is given, alarm names in the output will be prepended with the prefix; alarms that have the prefix will be skipped. This can be used to convert existing alarms to be managed by salt, as follows: CLI Example: 1. Make a "backup" of all existing searches $ salt-call splunk_search.list_all --out=txt | sed "s/local: //" > legacy_searches.sls 2. Get all searches with new prefixed names $ salt-call splunk_search.list_all "prefix=**MANAGED BY SALT** " --out=txt | sed "s/local: //" > managed_searches.sls 3. Insert the managed searches into splunk $ salt-call state.sls managed_searches.sls 4. Manually verify that the new searches look right 5. Delete the original searches $ sed s/present/absent/ legacy_searches.sls > remove_legacy_searches.sls $ salt-call state.sls remove_legacy_searches.sls 6. Get all searches again, verify no changes $ salt-call splunk_search.list_all --out=txt | sed "s/local: //" > final_searches.sls $ diff final_searches.sls managed_searches.sls z#splunk_search.list_all get defaultsZnothing)r )Ztriggered_alert_countz action.emailzaction.populate_lookupz action.rssz action.scriptzaction.summary_indexZqualifiedSearchZnext_scheduled_timec s s � | ]}|j |fV qd S )Nr< )r= �sr r r � <genexpr> s � zlist_all.<locals>.<genexpr>r$ � zdisplay.� descriptionzsplunk_search.presentzmanage splunk search Fr1 )Zdefault_flow_style�width)r r" r; � Exceptionr5 r& r r r' r r r0 � startswith�itemsr+ �salt�utilsZyamlZ safe_dump)�prefixr r0 Zdescription_containsZname_not_containsr r r$ r �defaultsZ readonly_keys�resultsr@ �drD �k�vr r r �list_all� sV - � � rQ )r! )NNNNNr! )�__doc__�logging� urllib.parser6 � collectionsr Zsalt.utils.yamlrI r r9 Zsplunklib.clientr � ImportError� getLogger�__name__�logZ__func_alias__r r r r r r, r5 r; r rQ r r r r �<module> s> � �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings