Function groupby_element

api/server.py:331–417

Get top ten repeated "elements" as defined in database_queries in "event_type" --- parameters: - in: path name: event_type schema: type: string required: true enum: - honeypot - network - cre

(event_type, element)

@app.route("/api/events/count/groupby/<event_type>/<element>", methods=["GET"])
def groupby_element(event_type, element):
    """
    Get top ten repeated "elements" as defined in database_queries in "event_type"
    ---
    parameters:
        - in: path
          name: event_type
          schema:
            type: string
          required: true
          enum:
            - honeypot
            - network
            - credential
            - file
            - data
            - pcap
        - in: path
          name: element
          schema:
            type: string
          required: true
          enum:
            - ip
            - country
            - port
            - module_name
            - username
            - password
            - machine_name
        - in: query
          name: date
          schema:
            type: date
          required: false
          description: Date to filter records for particular day
        - in: query
          name: country
          schema:
            type: string
          required: false
          description: used for filtering events by country
    responses:
        '200':
          description: Ok
          examples:
              application/json: [{"count":1703,"country":"DE"}]
        '404':
          description: Not Found
          examples:
            application/json: { "msg": "file/path not found!", "status": "error"}

    """
    abort(404) if (event_type not in event_types or element not in group_by_elements) else True
    date = get_value_from_request("date")
    filter_by = get_value_from_request('filter_by')
    element_value = get_value_from_request(filter_by)
    conditions = [condition for condition in [