You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
459 lines
11 KiB
459 lines
11 KiB
# commands.conf
|
|
|
|
# REST API wrapper for TrackMe, allows interracting with TrackMe API with get / post / delete calls
|
|
[trackme]
|
|
chunked = true
|
|
filename = trackme.py
|
|
python.version = python3
|
|
|
|
# Load tenants according to roles membership
|
|
[trackmeload]
|
|
chunked = true
|
|
filename = trackmeload.py
|
|
python.version = python3
|
|
|
|
# custom command for remote Splunk searches
|
|
[splunkremotesearch]
|
|
chunked = true
|
|
local = true
|
|
filename = splunkremotesearch.py
|
|
python.version = python3
|
|
|
|
# Data sampling mass executor
|
|
[trackmesamplingexecutor]
|
|
chunked = true
|
|
filename = trackmesamplingexecutor.py
|
|
python.version = python3
|
|
|
|
# Elastic Sources shared mass executor
|
|
[trackmeelasticexecutor]
|
|
chunked = true
|
|
filename = trackmeelasticexecutor.py
|
|
python.version = python3
|
|
|
|
# TrackMe tracker executor
|
|
[trackmetrackerexecutor]
|
|
chunked = true
|
|
filename = trackmetrackerexecutor.py
|
|
python.version = python3
|
|
|
|
# TrackMe tenant status summary
|
|
[trackmetenantstatus]
|
|
chunked = true
|
|
filename = trackmetenantstatus.py
|
|
python.version = python3
|
|
|
|
# splk-dhm: merge current/previous dicts
|
|
[trackmemergesplkdhm]
|
|
chunked = true
|
|
filename = trackmemergesplkdhm.py
|
|
python.version = python3
|
|
|
|
# splk-dhm: extract the current dict
|
|
[trackmeextractsplkdhm]
|
|
chunked = true
|
|
filename = trackmeextractsplkdhm.py
|
|
python.version = python3
|
|
|
|
# splk-mhm: extract the current dict
|
|
[trackmeextractsplkmhm]
|
|
chunked = true
|
|
filename = trackmeextractsplkmhm.py
|
|
python.version = python3
|
|
|
|
# splk-mhm: expand the current dict
|
|
[trackmeexpandsplkmhm]
|
|
chunked = true
|
|
filename = trackmeexpandsplkmhm.py
|
|
python.version = python3
|
|
|
|
# splk-mhm: merge current/previous dicts
|
|
[trackmemergesplkmhm]
|
|
chunked = true
|
|
filename = trackmemergesplkmhm.py
|
|
python.version = python3
|
|
|
|
# SPLK get flipping events
|
|
[trackmesplkgetflipping]
|
|
chunked = true
|
|
filename = trackmesplkgetflipping.py
|
|
python.version = python3
|
|
|
|
# Ack expiration tracker
|
|
[trackmeacktracker]
|
|
chunked = true
|
|
filename = trackmeacktracker.py
|
|
python.version = python3
|
|
|
|
# Notable generator
|
|
[trackmegennotable]
|
|
chunked = true
|
|
filename = trackmegennotable.py
|
|
python.version = python3
|
|
|
|
# Summary state event generator
|
|
[trackmecollect]
|
|
chunked = true
|
|
filename = trackmecollect.py
|
|
python.version = python3
|
|
|
|
# health tracker module
|
|
[trackmetrackerhealth]
|
|
chunked = true
|
|
filename = trackmetrackerhealth.py
|
|
python.version = python3
|
|
|
|
# pretty print json
|
|
[trackmeprettyjson]
|
|
chunked = true
|
|
filename = trackmeprettyjson.py
|
|
python.version = python3
|
|
|
|
# yield json
|
|
[trackmeyieldjson]
|
|
chunked = true
|
|
filename = trackmeyieldjson.py
|
|
python.version = python3
|
|
|
|
# expand ops status
|
|
[trackmeopsstatusexpand]
|
|
chunked = true
|
|
filename = trackmeopsstatusexpand.py
|
|
python.version = python3
|
|
|
|
# Outliers set rules
|
|
[trackmesplkoutlierssetrules]
|
|
chunked = true
|
|
filename = trackmesplkoutlierssetrules.py
|
|
python.version = python3
|
|
|
|
# Outliers train machine learning models
|
|
[trackmesplkoutlierstrain]
|
|
chunked = true
|
|
filename = trackmesplkoutlierstrain.py
|
|
python.version = python3
|
|
|
|
# Outliers render
|
|
[trackmesplkoutliersrender]
|
|
chunked = true
|
|
filename = trackmesplkoutliersrender.py
|
|
python.version = python3
|
|
|
|
# Outliers get rules
|
|
[trackmesplkoutliersgetrules]
|
|
chunked = true
|
|
filename = trackmesplkoutliersgetrules.py
|
|
python.version = python3
|
|
|
|
# Outliers get data
|
|
[trackmesplkoutliersgetdata]
|
|
chunked = true
|
|
filename = trackmesplkoutliersgetdata.py
|
|
python.version = python3
|
|
|
|
# Outliers train models executor
|
|
[trackmesplkoutlierstrainhelper]
|
|
chunked = true
|
|
filename = trackmesplkoutlierstrainhelper.py
|
|
python.version = python3
|
|
|
|
# Outliers tracker module
|
|
[trackmesplkoutlierstrackerhelper]
|
|
chunked = true
|
|
filename = trackmesplkoutlierstrackerhelper.py
|
|
python.version = python3
|
|
|
|
# API autodocs
|
|
[trackmeapiautodocs]
|
|
chunked = true
|
|
filename = trackmeapiautodocs.py
|
|
python.version = python3
|
|
|
|
# Get config
|
|
[trackmegetconf]
|
|
chunked = true
|
|
filename = trackmegetconf.py
|
|
python.version = python3
|
|
|
|
# splk-flx
|
|
[trackmesplkflxparse]
|
|
chunked = true
|
|
filename = trackmesplkflxparse.py
|
|
python.version = python3
|
|
|
|
# splk-flx converging
|
|
[trackmesplkflxconverging]
|
|
chunked = true
|
|
filename = trackmesplkflxconverging.py
|
|
python.version = python3
|
|
|
|
# splk-wlk
|
|
[trackmesplkwlkparse]
|
|
chunked = true
|
|
filename = trackmesplkwlkparse.py
|
|
python.version = python3
|
|
|
|
# custom command to extracts stats for splk-dhm
|
|
[trackmestsummarysplkdhm]
|
|
chunked = true
|
|
filename = trackmestsummarysplkdhm.py
|
|
python.version = python3
|
|
|
|
# splk-wlk: get reports definition and attributes from a local or remote deployment, and store in KV as needed
|
|
[trackmesplkwlkgetreportsdefgen]
|
|
chunked = true
|
|
filename = trackmesplkwlkgetreportsdefgen.py
|
|
python.version = python3
|
|
|
|
# splk-wlk: get reports definition and attributes from a local or remote deployment, and store in KV as needed
|
|
[trackmesplkwlkgetreportsdefstream]
|
|
chunked = true
|
|
filename = trackmesplkwlkgetreportsdefstream.py
|
|
python.version = python3
|
|
|
|
# splk-wlk: get report owner in a streaming fashion, used to get the owner of a report if not available in the upstream results
|
|
[trackmesplkwlkgetreportowner]
|
|
chunked = true
|
|
filename = trackmesplkwlkgetreportowner.py
|
|
python.version = python3
|
|
|
|
# splk-flx / splk-wlk: generate a JSON metric formated field taking in input one ore more fields resulting from the stream
|
|
[trackmegenjsonmetrics]
|
|
chunked = true
|
|
filename = trackmegenjsonmetrics.py
|
|
python.version = python3
|
|
|
|
# custom command used to preserve persistent fields from conflicting updates
|
|
[trackmepersistentfields]
|
|
chunked = true
|
|
filename = trackmepersistentfields.py
|
|
python.version = python3
|
|
|
|
# splk-wlk: custom command to remove inactive entities
|
|
[trackmesplkwlkinactiveinspector]
|
|
chunked = true
|
|
filename = trackmesplkwlkinactiveinspector.py
|
|
python.version = python3
|
|
|
|
# streaming custom command to extract JSON metrics
|
|
[trackmeextractjsonmetrics]
|
|
chunked = true
|
|
filename = trackmeextractjsonmetrics.py
|
|
python.version = python3
|
|
|
|
# streaming custom command to act as replicator from a children tenant to a parent tenant
|
|
[trackmereplicator]
|
|
chunked = true
|
|
filename = trackmereplicator.py
|
|
python.version = python3
|
|
|
|
# generating custom command to orchestrate the execution of replica trackers
|
|
[trackmereplicaexecutor]
|
|
chunked = true
|
|
filename = trackmereplicaexecutor.py
|
|
python.version = python3
|
|
|
|
# streaming custom command that can be used to manage auto grouping of entities in logical groups
|
|
[trackmeautogroup]
|
|
chunked = true
|
|
filename = trackmeautogroup.py
|
|
python.version = python3
|
|
|
|
# Runs a Splunk query for the purposes of executing TrackMe trackers by admin as the system user rather than the requester
|
|
[trackmeoneshotexecutor]
|
|
chunked = true
|
|
filename = trackmeoneshotexecutor.py
|
|
python.version = python3
|
|
|
|
# generating command to list items available from the Flex Objects use cases library
|
|
[trackmesplkflxgetuc]
|
|
chunked = true
|
|
filename = trackmesplkflxgetuc.py
|
|
python.version = python3
|
|
|
|
# splk-flx: custom command to remove inactive entities
|
|
[trackmesplkflxinactiveinspector]
|
|
chunked = true
|
|
filename = trackmesplkflxinactiveinspector.py
|
|
python.version = python3
|
|
|
|
# splk-fqm: custom command to remove inactive entities
|
|
[trackmesplkfqminactiveinspector]
|
|
chunked = true
|
|
filename = trackmesplkfqminactiveinspector.py
|
|
python.version = python3
|
|
|
|
# splk-soar: custom command to interact with Splunk SOAR
|
|
[trackmesplksoar]
|
|
chunked = true
|
|
filename = trackmesplksoar.py
|
|
python.version = python3
|
|
|
|
# splk-soar: a REST API streaming custom command to interact with Splunk SOAR
|
|
[trackmesplksoarlookup]
|
|
chunked = true
|
|
filename = trackmesplksoarlookup.py
|
|
python.version = python3
|
|
|
|
# generating command to lookup up a CMDB for that component and object
|
|
[trackmesplkcmdb]
|
|
chunked = true
|
|
filename = trackmesplkcmdb.py
|
|
python.version = python3
|
|
|
|
# generating command for stateful alert pre-filtering
|
|
[trackmestateful]
|
|
chunked = true
|
|
filename = trackmestateful.py
|
|
python.version = python3
|
|
|
|
# expand outliers models in streaming mode
|
|
[trackmesplkoutliersexpand]
|
|
chunked = true
|
|
filename = trackmesplkoutliersexpand.py
|
|
python.version = python3
|
|
|
|
# expand extra attributes for Flex Objects in streaming mode
|
|
[trackmesplkflxexpandextra]
|
|
chunked = true
|
|
filename = trackmesplkflxexpandextra.py
|
|
python.version = python3
|
|
|
|
# small utility to define the dcount host threshold for splk-dsm
|
|
[trackmesplksetcurrentdcounthost]
|
|
chunked = true
|
|
filename = trackmesplksetcurrentdcounthost.py
|
|
python.version = python3
|
|
|
|
# adaptive delay inspector for splk-feeds
|
|
[trackmesplkadaptivedelay]
|
|
chunked = true
|
|
filename = trackmesplkadaptivedelay.py
|
|
python.version = python3
|
|
|
|
# simple Python script to generate the where statement for maintenance knowledge database
|
|
[trackmereturnmaintenancedb]
|
|
chunked = true
|
|
filename = trackmereturnmaintenancedb.py
|
|
python.version = python3
|
|
|
|
# TrackMe decision maker backend
|
|
[trackmedecisionmaker]
|
|
chunked = true
|
|
filename = trackmedecisionmaker.py
|
|
python.version = python3
|
|
|
|
# TrackMe Splk Tags
|
|
[trackmesplktags]
|
|
chunked = true
|
|
filename = trackmesplktags.py
|
|
python.version = python3
|
|
|
|
# TrackMe Splk Priority
|
|
[trackmesplkpriority]
|
|
chunked = true
|
|
filename = trackmesplkpriority.py
|
|
python.version = python3
|
|
|
|
# TrackMe Splk SLA Classes
|
|
[trackmesplkslaclass]
|
|
chunked = true
|
|
filename = trackmesplkslaclass.py
|
|
python.version = python3
|
|
|
|
# TrackMe General Health Manager
|
|
[trackmegeneralhealthmanager]
|
|
chunked = true
|
|
filename = trackmegeneralhealthmanager.py
|
|
python.version = python3
|
|
|
|
# TrackMe Get Collection
|
|
[trackmegetcoll]
|
|
chunked = true
|
|
filename = trackmegetcoll.py
|
|
python.version = python3
|
|
|
|
# TrackMe get logicalgroups
|
|
[trackmegetlogicalgroups]
|
|
chunked = true
|
|
filename = trackmegetlogicalgroups.py
|
|
python.version = python3
|
|
|
|
# TrackMe utility to get the keyid (sha256 hash) from the object field, and adds as keyid in a streaming fashion
|
|
[trackmehashobject]
|
|
chunked = true
|
|
filename = trackmehashobject.py
|
|
python.version = python3
|
|
|
|
# Get Virtual Tenants Knowledge Objects
|
|
[trackmegetkos]
|
|
chunked = true
|
|
filename = trackmegetkos.py
|
|
python.version = python3
|
|
|
|
# Iterate through TrackMe Backups, check and extract archives information
|
|
[trackmecheckbackups]
|
|
chunked = true
|
|
filename = trackmecheckbackups.py
|
|
python.version = python3
|
|
|
|
# Delayed entities inspector for DSM and DHM
|
|
[trackmesplkfeedsdelayedinspector]
|
|
chunked = true
|
|
filename = trackmesplkfeedsdelayedinspector.py
|
|
python.version = python3
|
|
|
|
# A generating command to test remote accounts
|
|
[trackmetestremoteaccounts]
|
|
chunked = true
|
|
filename = trackmetestremoteaccounts.py
|
|
python.version = python3
|
|
|
|
# A streaming command to check the quality of fields
|
|
[trackmefieldsquality]
|
|
chunked = true
|
|
filename = trackmefieldsquality.py
|
|
python.version = python3
|
|
|
|
# A streaming command to extract results from trackmefieldsquality
|
|
[trackmefieldsqualityextract]
|
|
chunked = true
|
|
filename = trackmefieldsqualityextract.py
|
|
python.version = python3
|
|
|
|
# A streaming command to generate summary of trackmefieldsquality
|
|
[trackmefieldsqualitygensummary]
|
|
chunked = true
|
|
filename = trackmefieldsqualitygensummary.py
|
|
python.version = python3
|
|
|
|
# A generating command to generate the dictionary of fields to check for CIM compliance
|
|
[trackmefieldsqualitygendict]
|
|
chunked = true
|
|
filename = trackmefieldsqualitygendict.py
|
|
python.version = python3
|
|
|
|
# A streaming command to push undiscovered entities to splk-dsm
|
|
[trackmepushdatasource]
|
|
chunked = true
|
|
filename = trackmepushdatasource.py
|
|
python.version = python3
|
|
|
|
# A streaming command to expand tokens in a streaming fashion
|
|
[trackmeexpandtokens]
|
|
chunked = true
|
|
filename = trackmeexpandtokens.py
|
|
python.version = python3
|
|
|
|
# splk-fqm
|
|
[trackmesplkfqmparse]
|
|
chunked = true
|
|
filename = trackmesplkfqmparse.py
|
|
python.version = python3
|
|
|
|
# trackmeyamlpath, a streaming custom command to parse YAML in a streaming fashion
|
|
[trackmeyamlpath]
|
|
chunked = true
|
|
filename = trackmeyamlpath.py
|
|
python.version = python3
|