Function count_events

api/server.py:260–327

Get total number of events based on event type --- parameters: - in: path name: event_type schema: type: string required: true enum: - all - honeypot - network - credential

(event_type)

@app.route("/api/events/count/<event_type>", methods=["GET"])
def count_events(event_type):
    """
    Get total number of events based on event type
    ---
    parameters:
        - in: path
          name: event_type
          schema:
            type: string
          required: true
          enum:
            - all
            - honeypot
            - network
            - credential
            - file
            - data
            - pcap
        - in: query
          name: date
          schema:
            type: date
          required: false
          description: Date to filter records for particular day
    responses:
        '200':
          description: Ok
          examples:
            application/json: { "count": 293879, "date": null}
        '404':
          description: Not Found
          examples:
            application/json: { "msg": "file/path not found!","status": "error"}
    """
    abort(404) if event_type not in event_types else None

    date = get_value_from_request("date")
    try:
        return jsonify(
            {
                "count": int(
                    elasticsearch_events.count(
                        index=event_types[event_type],
                        body=filter_by_date(date)
                    )['count']
                    if date else
                    elasticsearch_events.count(index=event_types[event_type])['count']
                ),
                "date": date
            } if event_type != "all" else {
                "count": sum(
                    [
                        int(
                            elasticsearch_events.count(
                                index=event_types[event],
                                body=filter_by_date(date)
                            )['count']
                            if date else