beenull/crowdsec
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

fix meta encoding

Browse source
This commit is contained in:
bui 2023-10-25 13:54:57 +02:00
parent eafffe7c94
commit 4bfca8cab5
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
pkg/acquisition/modules/waap/utils.go
View file

@ -1,6 +1,7 @@
package wafacquisition
import (
"encoding/json"
"fmt"
"time"
@ -31,6 +32,21 @@ func WaapEventGeneration(inEvt types.Event) (types.Event, error) {
alert.Capacity = ptr.Of(int32(1))
alert.Events = make([]*models.Event, 0) //@tko -> URI, method, UA, param name
alert.Meta = make(models.Meta, 0) //@tko -> URI, method, UA, param name
for _, key := range []string{"target_uri", "method"} {
valueByte, err := json.Marshal([]string{inEvt.Parsed[key]})
if err != nil {
log.Debugf("unable to serialize key %s", key)
continue
}
meta := models.MetaItems0{
Key: key,
Value: string(valueByte),
}
alert.Meta = append(alert.Meta, &meta)
log.Infof("adding Meta - %s = %s", key, inEvt.Parsed[key])
}
alert.EventsCount = ptr.Of(int32(1))
alert.Labels = []string{"waf"} //don't know what to do about this
alert.Leakspeed = ptr.Of("")