Dict-Like object.
DataSources are best instantiated from DevTree:
>>> dt = DevTree() >>> ds = dt[25] # OR use search() >>> ds = dt.search('10.10.1.1')
str): name of the datasourcestr): IP of the datasourcestr): hostname for the datasourcestr): internal datasource ID (e.g 144234544545444)str): numeric internal datasource type idstr): always '3' a datasource or '254' for a clientstr): internal ds_id for the parent devicestr): name of the parent devicestr): 'T' or 'F'bool): Client datasource or notstr): numeric zone_idstr): name of the zonestr): internal numeric timezone IDstr): vendor of datasource (e.g. Microsoft)str): model of datasource (e.g. Windows)str): Use syslog over TLSstr): URL of the datasourceDevTree| Method | __init__ | Create a new DataSource, best instantiated from DevTree. |
| Method | data_from_id | Gets full of the DataSource parameters |
| Method | load_details | DataSource object is lazy. This gets the rest of the parameters. |
| Method | refresh | Gets the detailed parameters. Same as load_details |
| Method | delete | Delete the datasource, be careful. |
| Method | delete_client | Delete the datasource's clients, be careful. |
| Method | get_id | Returns the Datasource ID. |
| Method | _map_parameters | Map the internal ESM field names to msiempy style |
Inherited from NitroDict:
| Instance Variable | data | Underlying dict object |
| Method | __str__ | str(obj) -> return text string. |
| Method | __repr__ | repr(obj) -> return json string. |
| Method | json | JSON representation of a item |
| Method | text | Text list of item's values |
Inherited from NitroObject (via NitroDict):
| Class | NitroJSONEncoder | Custom JSON encoder that will use the approprtiate propertie depending of the type of NitroObject. TODO support json json dumping of QueryFilers, may be by making them inherits from NitroDict. |
| Instance Variable | nitro | msiempy.core.session.NitroSession object. Interface to the SIEM. |
load_detailsDelete the datasource, be careful.
Delete the datasource's clients, be careful.