AlgosecQuery

Performs a batch traffic simulation query using Firewall Analyzer.

Type
python
Pack
Algosec

Source

import demistomock as demisto  # noqa: F401
from CommonServerPython import *  # noqa: F401


def algosec_query():
    resp = demisto.executeCommand("algosec-query", demisto.args())

    if isError(resp[0]):
        result = resp
    else:
        data = demisto.get(resp[0], "Contents.QueryResponse.QueryResult")
        if data:
            data = data if isinstance(data, list) else [data]
            data = flattenTable(data)
            result = {"ContentsFormat": formats["table"], "Type": entryTypes["note"], "Contents": data}
        else:
            result = "No results."
    return_results(result)


def main():  # pragma: no cover
    try:
        algosec_query()
    except Exception as e:
        err_msg = f"Encountered an error while running the script: [{e}]"
        return_error(err_msg, error=e)


if __name__ in ("__main__", "__builtin__", "builtins"):
    main()

README

Performs a batch traffic simulation query using Firewall Analyzer.

Script Data


Name Description
Script Type python
Tags Algosec

Dependencies


This script uses the following commands and scripts.

Inputs


Argument Name Description
source The source(s) for the query. Multiple values must be comma-separated.
destination The destination(s) for the query. Multiple values must be comma-separated.
service The service(s) for the query. Multiple values must be comma-separated.
user The user for the query.
application The application for the query.

Outputs


There are no outputs for this script.