From 8acf2d72737545b966df6b078043557d50d7ffee Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Fri, 15 Dec 2023 09:16:28 +0100 Subject: Improved InfluxDB push daemon. * added proper gauge handling that enables pushing data w/o missing out anything e.g. short flows with a lifetime in-between two InfluxDB intervals Signed-off-by: Toni Uhlig --- examples/py-semantic-validation/py-semantic-validation.py | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'examples/py-semantic-validation') diff --git a/examples/py-semantic-validation/py-semantic-validation.py b/examples/py-semantic-validation/py-semantic-validation.py index 6da56ee26..9207c3b69 100755 --- a/examples/py-semantic-validation/py-semantic-validation.py +++ b/examples/py-semantic-validation/py-semantic-validation.py @@ -256,9 +256,21 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): except AttributeError: pass + try: + if current_flow.flow_finished == True and \ + json_dict['flow_event_name'] == 'detection-update': + raise SemanticValidationException(current_flow, + 'Flow state already finished, but another detection-update received.') + except AttributeError: + pass + try: if json_dict['flow_state'] == 'finished': current_flow.flow_finished = True + elif json_dict['flow_state'] == 'info' and \ + current_flow.flow_finished is True: + raise SemanticValidationException(current_flow, + 'Flow state already finished, but switched back to info state.') if current_flow.flow_finished == True and \ json_dict['flow_event_name'] != 'analyse' and \ -- cgit v1.2.3