mirrors/crowdsec
1
0
Fork 0
mirror of https://github.com/crowdsecurity/crowdsec.git synced 2025-05-11 12:25:53 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

pkg/csprofiles: default duration and type for partial configuration

Browse source
This commit is contained in:
marco 2024-05-30 14:08:19 +02:00
parent 659774fd3d
commit 2ef06e6140
1 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
pkg/csprofiles/csprofiles.go
View file

@ -21,7 +21,10 @@ type Runtime struct {
Logger *log.Entry `json:"-" yaml:"-"` Logger *log.Entry `json:"-" yaml:"-"`
} }
const defaultDuration = "4h" const (
defaultDuration = "4h"
defaultType = "ban"
)
func NewProfile(profilesCfg []*csconfig.ProfileCfg) ([]*Runtime, error) { func NewProfile(profilesCfg []*csconfig.ProfileCfg) ([]*Runtime, error) {
var err error var err error
@ -77,7 +80,7 @@ func NewProfile(profilesCfg []*csconfig.ProfileCfg) ([]*Runtime, error) {
for _, decision := range profile.Decisions { for _, decision := range profile.Decisions {
if runtime.RuntimeDurationExpr == nil { if runtime.RuntimeDurationExpr == nil {
var duration string var duration string
if decision.Duration != nil { if decision.Duration != nil && *decision.Duration != "" {
duration = *decision.Duration duration = *decision.Duration
} else { } else {
runtime.Logger.Warningf("No duration specified for %s, using default duration %s", profile.Name, defaultDuration) runtime.Logger.Warningf("No duration specified for %s, using default duration %s", profile.Name, defaultDuration)
@ -121,8 +124,10 @@ func (Profile *Runtime) GenerateDecisionFromProfile(Alert *models.Alert) ([]*mod
/*some fields are populated from the reference object : duration, scope, type*/ /*some fields are populated from the reference object : duration, scope, type*/
decision.Duration = new(string) decision.Duration = new(string)
if refDecision.Duration != nil { if refDecision.Duration != nil && *refDecision.Duration != "" {
*decision.Duration = *refDecision.Duration *decision.Duration = *refDecision.Duration
} else {
*decision.Duration = defaultDuration
} }
if Profile.Cfg.DurationExpr != "" && Profile.RuntimeDurationExpr != nil { if Profile.Cfg.DurationExpr != "" && Profile.RuntimeDurationExpr != nil {
@ -145,7 +150,11 @@ func (Profile *Runtime) GenerateDecisionFromProfile(Alert *models.Alert) ([]*mod
} }
decision.Type = new(string) decision.Type = new(string)
*decision.Type = *refDecision.Type if refDecision.Type != nil && *refDecision.Type != "" {
*decision.Type = *refDecision.Type
} else {
*decision.Type = defaultType
}
/*for the others, let's populate it from the alert and its source*/ /*for the others, let's populate it from the alert and its source*/
decision.Value = new(string) decision.Value = new(string)