You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
81 lines
3.1 KiB
81 lines
3.1 KiB
# Copyright (C) 2005-2025 Splunk Inc. All Rights Reserved.
|
|
|
|
"""
|
|
Modular Input that runs on startup that:
|
|
- loads default policies to KV store if they are not available
|
|
- creates default Data Integrations connections if they don't exist
|
|
"""
|
|
|
|
import sys
|
|
|
|
from splunk.clilib.bundle_paths import make_splunkhome_path
|
|
|
|
sys.path.append(make_splunkhome_path(['etc', 'apps', 'SA-ITOA', 'lib']))
|
|
import itsi_path
|
|
from ITOA.itoa_config import get_supported_objects
|
|
from itsi.event_management.utils import DefaultDataIntegrationConnectionLoader
|
|
from itsi.event_management.utils import NotableEventDefaultPoliciesLoader
|
|
from ITOA.itoa_common import modular_input_should_run
|
|
from ITOA.setup_logging import getLogger4ModInput
|
|
from ITOA.mod_input_utils import skip_run_during_migration
|
|
|
|
from SA_ITOA_app_common.solnlib.modular_input import ModularInput
|
|
from SA_ITOA_app_common.solnlib.server_info import ServerInfo
|
|
|
|
|
|
class ItsiEventManagementObjectsLoader(ModularInput):
|
|
"""
|
|
Mod input that handles Upgrades which is primarily migration of data
|
|
from older version to current version
|
|
"""
|
|
|
|
title = "IT Service Intelligence Default Event Management Objects Loader"
|
|
description = "Loads the default aggregation policies and creates default data integration connections."
|
|
handlers = None
|
|
app = 'SA-ITOA'
|
|
name = 'itsi_default_event_management_objects_loader'
|
|
use_single_instance = False
|
|
use_kvstore_checkpointer = False
|
|
use_hec_event_writer = False
|
|
|
|
def extra_arguments(self):
|
|
return [{
|
|
'name': "log_level",
|
|
'title': "Logging Level",
|
|
'description': "This is the level at which the modular input will log data."
|
|
}]
|
|
|
|
@skip_run_during_migration
|
|
def do_run(self, input_config):
|
|
"""
|
|
- This is the method called by splunkd when mod input is enabled.
|
|
@param input_config: config passed down by splunkd
|
|
"""
|
|
logger = getLogger4ModInput(input_config)
|
|
server_info = ServerInfo(self.session_key)
|
|
# log the message for restartless upgrade testing which can be useful while debugging.
|
|
stanza_name = next(iter(input_config.keys()))
|
|
logger.info(f"Restartless upgrade - Reloaded modular input {stanza_name}")
|
|
logger.info(f"{stanza_name} modular input running on instance: {server_info.server_name}")
|
|
try:
|
|
ret = NotableEventDefaultPoliciesLoader(self.session_key, logger).upload_default_policies()
|
|
if not ret:
|
|
logger.error('Failed to create default aggregation policies')
|
|
else:
|
|
logger.info("Successfully uploaded default aggregation policies")
|
|
|
|
ret = DefaultDataIntegrationConnectionLoader(self.session_key, logger).create_default_data_integration_connections()
|
|
if not ret:
|
|
logger.error("Failed to create one or more default data integration connections")
|
|
else:
|
|
logger.info("Successfully created all default data integration connections")
|
|
|
|
except Exception as e:
|
|
logger.exception(e)
|
|
raise
|
|
|
|
|
|
if __name__ == "__main__":
|
|
worker = ItsiEventManagementObjectsLoader()
|
|
worker.execute()
|