2017-01-26 00:37:23 +01:00
|
|
|
# Webhooks for external integrations.
|
2017-11-16 00:43:10 +01:00
|
|
|
from typing import Any, Dict, Iterable, Optional, Text
|
|
|
|
|
|
|
|
from django.http import HttpRequest, HttpResponse
|
2017-01-26 00:37:23 +01:00
|
|
|
from django.utils.translation import ugettext as _
|
2017-11-16 00:43:10 +01:00
|
|
|
|
2017-10-31 04:25:48 +01:00
|
|
|
from zerver.decorator import api_key_only_webhook_view
|
2017-09-30 04:18:16 +02:00
|
|
|
from zerver.lib.actions import check_send_stream_message
|
2017-10-31 04:25:48 +01:00
|
|
|
from zerver.lib.request import REQ, has_request_variables
|
2017-11-16 00:43:10 +01:00
|
|
|
from zerver.lib.response import json_error, json_success
|
2017-01-26 00:37:23 +01:00
|
|
|
from zerver.lib.validator import check_dict, check_string
|
2017-11-16 00:43:10 +01:00
|
|
|
from zerver.models import MAX_SUBJECT_LENGTH, UserProfile
|
2017-01-26 00:37:23 +01:00
|
|
|
|
|
|
|
@api_key_only_webhook_view('Splunk')
|
|
|
|
@has_request_variables
|
2017-05-02 01:00:50 +02:00
|
|
|
def api_splunk_webhook(request, user_profile,
|
2017-01-26 00:37:23 +01:00
|
|
|
payload=REQ(argument_type='body'), stream=REQ(default='splunk'),
|
|
|
|
topic=REQ(default=None)):
|
2017-05-02 01:00:50 +02:00
|
|
|
# type: (HttpRequest, UserProfile, Dict[str, Any], Text, Optional[Text]) -> HttpResponse
|
2017-01-26 00:37:23 +01:00
|
|
|
|
|
|
|
# use default values if expected data is not provided
|
|
|
|
search_name = payload.get('search_name', 'Missing search_name')
|
|
|
|
results_link = payload.get('results_link', 'Missing results_link')
|
|
|
|
host = payload.get('result', {}).get('host', 'Missing host')
|
|
|
|
source = payload.get('result', {}).get('source', 'Missing source')
|
|
|
|
raw = payload.get('result', {}).get('_raw', 'Missing _raw')
|
|
|
|
|
|
|
|
# if no topic provided, use search name but truncate if too long
|
|
|
|
if topic is None:
|
|
|
|
if len(search_name) >= MAX_SUBJECT_LENGTH:
|
|
|
|
topic = "{}...".format(search_name[:(MAX_SUBJECT_LENGTH - 3)])
|
|
|
|
else:
|
|
|
|
topic = search_name
|
|
|
|
|
|
|
|
# construct the message body
|
|
|
|
body = "Splunk alert from saved search"
|
|
|
|
body_template = ('\n[{search}]({link})\nhost: {host}'
|
|
|
|
'\nsource: {source}\n\nraw: {raw}')
|
|
|
|
body += body_template.format(search = search_name, link = results_link,
|
|
|
|
host = host, source = source, raw = raw)
|
|
|
|
|
|
|
|
# send the message
|
2017-09-30 04:18:16 +02:00
|
|
|
check_send_stream_message(user_profile, request.client, stream, topic, body)
|
2017-01-26 00:37:23 +01:00
|
|
|
|
|
|
|
return json_success()
|