modules.reporting.elasticsearch.ElasticSearch

Package modules :: Package reporting :: Module elasticsearch :: Class ElasticSearch |
[hide private]
[frames] | no frames]

# Class ElasticSearch

source code

                            object --+
                                     |
    lib.cuckoo.common.abstracts.Report --+
                                         |
                                        ElasticSearch

Stores report in Elasticsearch.

Instance Methods | [hide private]
connect(self) Connect to Elasticsearch. | source code
apply_template(self) | source code
get_base_document(self) | source code
do_index(self, obj) | source code
do_bulk_index(self, bulk_reqs) | source code
process_call(self, call) This function converts all arguments to strings to allow ES to map them properly. | source code
process_behavior(self, results, bulk_submit_size=1000) Index the behavioral data. | source code
run(self, results) Index the Cuckoo report into ElasticSearch. | source code
Inherited from `lib.cuckoo.common.abstracts.Report`: `__init__`, `set_options`, `set_path`, `set_task` Inherited from `lib.cuckoo.common.abstracts.Report` (private): `_get_analysis_path` Inherited from `object`: `__delattr__`, `__format__`, `__getattribute__`, `__hash__`, `__new__`, `__reduce__`, `__reduce_ex__`, `__repr__`, `__setattr__`, `__sizeof__`, `__str__`, `__subclasshook__`

Class Variables | [hide private]
Inherited from `lib.cuckoo.common.abstracts.Report`: `order`

Properties | [hide private]
Inherited from `object`: `__class__`

Method Details | [hide private]

### connect(self) | source code
Connect to Elasticsearch. Raises: `CuckooReportError` - if unable to connect.

### run(self, results) | source code
Index the Cuckoo report into ElasticSearch. Parameters: `results` - analysis results dictionary. Raises: `CuckooReportError` - if the connection or reporting failed. Overrides: lib.cuckoo.common.abstracts.Report.run