-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Event Collector] - GitGuaridan #32039
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks great!
I will approve after we have an answer about the 2nd endpoint, and the demo
Packs/GitGuardian/Integrations/GitGuardianEventCollector/README.md
Outdated
Show resolved
Hide resolved
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector.py
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks good, see notes
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector.py
Outdated
Show resolved
Hide resolved
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector.py
Outdated
Show resolved
Hide resolved
For this HelloWorld implementation, no special attributes defined | ||
""" | ||
|
||
def search_events( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd merge this function with fetch_events()
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I prefer to keep them as separate functions
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector.py
Outdated
Show resolved
Hide resolved
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector.py
Show resolved
Hide resolved
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector.py
Outdated
Show resolved
Hide resolved
params=params, | ||
retries=3, | ||
) | ||
new_events = self.remove_duplicated_events(response.get("results"), prev_run_fetched_event_ids) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why would we run this on the same prev_run_fetched_event_ids
over multiple pages?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The API returns results consequently in the incident ID, and not in the last_occurence_date field, which means that if event 1 happened after event number 2, they will still get returned as [event 1, event 2]
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector_test.py
Outdated
Show resolved
Hide resolved
Packs/GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector.yml
Outdated
Show resolved
Hide resolved
.../GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector_description.md
Outdated
Show resolved
Hide resolved
.../GitGuardian/Integrations/GitGuardianEventCollector/GitGuardianEventCollector_description.md
Outdated
Show resolved
Hide resolved
@MLainer1 Need content for the pack readme. |
Co-authored-by: ShirleyDenkberg <[email protected]>
* [Collector] - GitGuaridan * formast and docs * pack ignore * adding increment time to audit logs * added tests * DI * format * description * Adding modeling rules * Modified the modeling rule * Modified modeling rule * added support for incident type event * fix tests * added tests * pre-commit * Added url field to schema * readme * fetch redesign * precommit * line too long * changes * additionalinfo * cr * Apply suggestions from code review Co-authored-by: ShirleyDenkberg <[email protected]> * flake8 * updated next run * autopep8 * changes --------- Co-authored-by: Yehonatan Asta <[email protected]> Co-authored-by: yasta5 <[email protected]> Co-authored-by: ShirleyDenkberg <[email protected]>
Contributing to Cortex XSOAR Content
Make sure to register your contribution by filling the contribution registration form
The Pull Request will be reviewed only after the contribution registration form is filled.
Status
Related Issues
fixes: link to the issue
Description
Creating a new event collector for GitGuardian
Must have