Skip to content

ti_abusech: improve error handling and reporting in malwarebazaar data stream - #10156

Merged
efd6 merged 1 commit into
elastic:mainfrom
efd6:10155-ti_abusech_errors
Jun 17, 2024
Merged

ti_abusech: improve error handling and reporting in malwarebazaar data stream#10156
efd6 merged 1 commit into
elastic:mainfrom
efd6:10155-ti_abusech_errors

Conversation

@efd6

@efd6 efd6 commented Jun 16, 2024

Copy link
Copy Markdown
Contributor

Proposed commit message

See title.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@efd6 efd6 added enhancement New feature or request Integration:ti_abusech abuse.ch Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Jun 16, 2024
@efd6 efd6 self-assigned this Jun 16, 2024
@elasticmachine

Copy link
Copy Markdown

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elastic-sonarqube

Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

cc @efd6

@efd6
efd6 marked this pull request as ready for review June 16, 2024 23:05
@efd6
efd6 requested a review from a team as a code owner June 16, 2024 23:05
@elasticmachine

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

}).do_request().as(resp, resp.StatusCode == 200 ?
bytes(resp.Body).decode_json().as(body, body.?query_status.orValue("") == "ok" ?
{
"events": body.data.map(ind, {

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This assumes that the API always responds sanely and that ok implies the data field is present.

@kcreddy kcreddy left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍🏼

@efd6
efd6 merged commit f838305 into elastic:main Jun 17, 2024
@elasticmachine

Copy link
Copy Markdown

Package ti_abusech - 2.1.0 containing this change is available at https://epr.elastic.co/search?package=ti_abusech

@efd6
efd6 deleted the 10155-ti_abusech_errors branch February 5, 2025 22:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request Integration:ti_abusech abuse.ch Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

3 participants