admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Previous commit overwrote things we did not want to, like fields besides required_fields in the tags section. Now we are more careful.

Browse Source
This commit is contained in:
pyth0n1c
2022-01-10 15:50:17 -08:00
parent 3df196b43d
commit 7effe85ae2
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/required_fields_cleaner.py
+5 -1
View File
@@ -297,7 +297,11 @@ def clean_folder(directory:str, defined_datamodels:dict):
required_fields_from_yaml = set(parsed['tags']['required_fields'])
fields_to_update = update_required_fields_for_yaml(filename, parsed["search"], set(parsed["tags"]["required_fields"]), set(parsed["datamodel"]), defined_datamodels, required_fields_from_yaml)
if fields_to_update != {}:
parsed.update(fields_to_update)
if 'datamodel' in fields_to_update:
parsed['datamodel'] = fields_to_update['datamodel']
if 'tags' in fields_to_update and 'required_fields' in fields_to_update['tags']:
parsed['tags']['required_fields'] = fields_to_update['tags']['required_fields']
required_updates += 1
with open(filename, 'w') as updated_cfg:
yaml.safe_dump(parsed, updated_cfg)