Thanasis Naskos / CUREX - Knowledge Extraction Analytics - KEA

Authored by Thanasis Naskos over 2 years ago

Showing 4 changed files with 12 additions and 8 deletions

...	...	@@ -31,6 +31,8 @@
31	31	def __init__(self):
32	32	self.data_dates = []
33	33	self.data_values = []
	34	+ self.source_ip = "10.0.2.15"
	35	+ self.target_ip = "10.0.2.15"
34	36	self.read_log_conf(LOGGING_CONF_FILE)
35	37	self.logger = logging.getLogger("mltd-online")
36	38	self.logger.info("Online MLTD is running")
...	...	@@ -86,6 +88,8 @@
86	88	# "%Y-%m-%dT%H:%M:%SZ"
87	89	# )
88	90	# )
	91	+ self.source_ip = measDict["event_alarm"][event]["source_ip"]
	92	+ self.target_ip = measDict["event_alarm"][event]["destination_ip"]
89	93	event_alarm_id = measDict["event_alarm"][event]["event_alarm_id"]
90	94	data_values.append(event_alarm_id)
91	95
92	96
...	...	@@ -126,12 +130,12 @@
126	130	f" - Expected timeframe: {round(timeframe,2)} secs")
127	131
128	132	ReportSyslog.report(
129		- self.asset_id, max(predictions) * 100, timeframe
	133	+ self.asset_id, max(predictions) * 100, timeframe, self.source_ip, self.target_ip
130	134	)
131	135	ReportTimeDB.report(
132	136	self.time_db_client, self.asset_id, max(predictions) * 100, timeframe
133	137	)
134		- self.logger.info(f"The incident was reportered on TimescaleDB")
	138	+ self.logger.info(f"The incident was reportered on TimescaleDB and Rsyslog server")
135	139	else:
136	140	self.logger.info(
137	141	f"The predicted risk {round(max(predictions),2)} is "

1	1	import logging.handlers
2	2
3		-def report(asset_id, risk, timeframe):
	3	+def report(asset_id, risk, timeframe, source_ip, target_ip):
4	4	my_logger = logging.getLogger('MyLogger')
5	5	my_logger.setLevel(logging.DEBUG)
6	6
...	...	@@ -10,5 +10,5 @@
10	10	formatter = logging.Formatter(' %(message)s')
11	11	handler.setFormatter(formatter)
12	12	my_logger.addHandler(handler)
13		- my_logger.critical(f'source_ip: 10.0.2.15 target_ip: 10.0.2.15 asset: {asset_id} risk: {risk} timeframe: {timeframe}')
	13	+ my_logger.critical(f'source_ip: {source_ip} target_ip: {target_ip} asset: {asset_id} risk: {risk} timeframe: {timeframe}')