Method flush_webhook

nodedb/src/control/security/siem.rs:133–172

Send buffered events to configured webhook (async).

(&self)

    /// Send buffered events to configured webhook (async).
    pub async fn flush_webhook(&self) {
        if self.config.webhook_url.is_empty() {
            return;
        }

        let audit_events = self.drain_audit();
        let auth_events = self.drain_auth();
        let all: Vec<AuditEntry> = audit_events.into_iter().chain(auth_events).collect();

        if all.is_empty() {
            return;
        }

        let (body, signature) = self.build_webhook_payload(&all);

        let mut req = self
            .client
            .post(&self.config.webhook_url)
            .header("Content-Type", "application/json")
            .timeout(std::time::Duration::from_secs(
                self.config.webhook_timeout_secs,
            ))
            .body(body);

        if !signature.is_empty() {
            req = req.header("X-NodeDB-Signature", &signature);
        }

        match req.send().await {
            Ok(resp) if resp.status().is_success() => {
                info!(events = all.len(), "SIEM webhook delivered");
            }
            Ok(resp) => {
                warn!(status = %resp.status(), "SIEM webhook delivery failed");
            }
            Err(e) => {
                warn!(error = %e, "SIEM webhook request failed");
            }
        }
    }

    /// Whether any export destinations are configured.
    pub fn is_configured(&self) -> bool {