grokfile endpoint

note: grokfile API endpoint does not currently return all data

Author: rfcriblio

README.md

@@ -1,4 +1,4 @@
-# Python API Wrapper Module
+# Cribl Python API Wrapper Module
 
 ## Overview
 The API wrapper module provides a developer with basic create/update/delete utilities for multiple areas of the Stream API. 
@@ -17,13 +17,22 @@ The distribution can be visualized as follows:
 ├── cribl_python_api_wrapper
 │   ├── auth
 │   ├── collectors
+│   ├── diag
 │   ├── event_breaker_rules
 │   ├── executors
+│   ├── fleet_mappings
 │   ├── functions
+│   ├── global_variables
 │   ├── groups
 │   ├── inputs
+│   ├── jobs
 │   ├── lib
+│   ├── licenses
 │   ├── lookups
+│   ├── mappings
+│   ├── messages
+│   ├── notification_targets
+│   ├── notifications
 │   ├── outputs
 │   ├── packs
 │   ├── parsers

cribl_python_api_wrapper/grokfiles/__init__.py

@@ -0,0 +1 @@
+from .grokfile_operations import *

cribl_python_api_wrapper/grokfiles/grokfile_operations.py

@@ -0,0 +1,120 @@
+from cribl_python_api_wrapper.lib.http_operations import *
+
+
+def get_grokfiles(base_url, cribl_auth_token, worker_group=None, fleet=None, group=None, verify=True):
+    headers = {"Content-type": "application/json",
+               "Authorization": "Bearer " + cribl_auth_token}
+    payload = None
+
+    try:
+        if worker_group is not None and fleet is None:
+            group = worker_group
+        elif fleet is not None and worker_group is None:
+            group = fleet
+        elif fleet is not None and worker_group is not None:
+            raise Exception("Worker group and fleet were both set; operation can be performed on only one worker group"
+                            " or fleet at a time.")
+
+        if group is not None:
+            return get(base_url + "/m/" + group + "/lib/grok",
+                       headers=headers, payload=payload, verify=verify)
+        else:
+            return get(base_url + "/lib/grok",
+                       headers=headers, payload=payload)
+
+    except Exception as e:
+        raise Exception(
+            "General exception raised while attempting to get parser information from Cribl: %s" % str(e))
+
+
+def get_grokfile(base_url, cribl_auth_token, grokfile_id, worker_group=None, fleet=None, group=None, verify=True):
+    headers = {"Content-type": "application/json",
+               "Authorization": "Bearer " + cribl_auth_token}
+    payload = None
+
+    try:
+        if worker_group is not None and fleet is None:
+            group = worker_group
+        elif fleet is not None and worker_group is None:
+            group = fleet
+        elif fleet is not None and worker_group is not None:
+            raise Exception("Worker group and fleet were both set; operation can be performed on only one worker group"
+                            " or fleet at a time.")
+        if group is not None:
+            return get(base_url + "/m/" + group + "/lib/grok" + "/" + grokfile_id,
+                       headers=headers, payload=payload, verify=verify)
+        else:
+            return get(base_url + "/lib/grok" + "/" + grokfile_id,
+                       headers=headers, payload=payload, verify=verify)
+    except Exception as e:
+        raise Exception("General exception raised while attempting to create pipeline: %s " % str(e))
+
+
+def create_grokfile(base_url, cribl_auth_token, config, worker_group=None, fleet=None, group=None, verify=True):
+    headers = {"Content-type": "application/json",
+               "Authorization": "Bearer " + cribl_auth_token}
+    payload = config
+
+    try:
+        if worker_group is not None and fleet is None:
+            group = worker_group
+        elif fleet is not None and worker_group is None:
+            group = fleet
+        elif fleet is not None and worker_group is not None:
+            raise Exception("Worker group and fleet were both set; operation can be performed on only one worker group"
+                            " or fleet at a time.")
+        if group is not None:
+            return post(base_url + "/m/" + group + "/lib/grok/",
+                        headers=headers, payload=payload, verify=verify)
+        else:
+            return post(base_url + "/lib/grok",
+                        headers=headers, payload=payload, verify=verify)
+    except Exception as e:
+        raise Exception("General exception raised while attempting to create pipeline: %s " % str(e))
+
+
+def update_grokfile(base_url, cribl_auth_token, grokfile_id, config, worker_group=None, fleet=None, group=None,
+                    verify=True):
+    headers = {"Content-type": "application/json",
+               "Authorization": "Bearer " + cribl_auth_token}
+    payload = config
+
+    try:
+        if worker_group is not None and fleet is None:
+            group = worker_group
+        elif fleet is not None and worker_group is None:
+            group = fleet
+        elif fleet is not None and worker_group is not None:
+            raise Exception("Worker group and fleet were both set; operation can be performed on only one worker group"
+                            " or fleet at a time.")
+        if group is not None:
+            return patch(base_url + "/m/" + group + "/lib/grok/" + grokfile_id,
+                         headers=headers, payload=payload, verify=verify)
+        else:
+            return patch(base_url + "/lib/grok/" + grokfile_id,
+                         headers=headers, payload=payload, verify=verify)
+    except Exception as e:
+        raise Exception("General exception raised while attempting to update parser: %s " % str(e))
+
+
+def delete_grokfile(base_url, cribl_auth_token, grokfile_id, worker_group=None, fleet=None, group=None, verify=True):
+    headers = {"Content-type": "application/json",
+               "Accept": "application/json",
+               "Authorization": "Bearer " + cribl_auth_token}
+    try:
+        if worker_group is not None and fleet is None:
+            group = worker_group
+        elif fleet is not None and worker_group is None:
+            group = fleet
+        elif fleet is not None and worker_group is not None:
+            raise Exception("Worker group and fleet were both set; operation can be performed on only one worker group"
+                            " or fleet at a time.")
+        if group is not None:
+            return delete(base_url + "/m/" + group + "/lib/grok/" + grokfile_id,
+                          headers=headers, verify=verify)
+        else:
+            return delete(base_url + "/lib/grok/" + grokfile_id,
+                          headers=headers, verify=verify)
+
+    except Exception as e:
+        raise Exception("General exception raised while attempting to delete input %s: %s" % (grokfile_id, str(e)))