Skip to content
This repository has been archived by the owner on Nov 3, 2021. It is now read-only.

Commit

Permalink
Add cloudtrail sqs queue name as a tag to each event
Browse files Browse the repository at this point in the history
  • Loading branch information
pwnbus committed Feb 12, 2020
1 parent 1eb6a01 commit 87b1083
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions mq/esworker_cloudtrail.py
Expand Up @@ -62,6 +62,7 @@ def keyMapping(aDict):
returndict["category"] = "cloudtrail" returndict["category"] = "cloudtrail"
returndict["processid"] = str(os.getpid()) returndict["processid"] = str(os.getpid())
returndict["processname"] = sys.argv[0] returndict["processname"] = sys.argv[0]
returndict["tags"] = [options.taskexchange]
returndict["severity"] = "INFO" returndict["severity"] = "INFO"
if "sourceIPAddress" in aDict and "eventName" in aDict and "eventSource" in aDict: if "sourceIPAddress" in aDict and "eventName" in aDict and "eventSource" in aDict:
summary_str = "{0} performed {1} in {2}".format( summary_str = "{0} performed {1} in {2}".format(
Expand Down

0 comments on commit 87b1083

Please sign in to comment.