Error reporting from analytics

[pcoccoli]

Some analytics (regardless of which interface they use) may call third party APIs, particularly those doing threat intel enrichment. Sometimes those APIs may fail, either due to authentication issues, temporary network problems, etc. There is currently no way for the user to be notified of such problems.

There should be some way for analytics to capture such error information and report it back up. The implementation may differ per analytics interface (e.g. a native python interface where the analytics run under that same python interpreter as the core can probably just raise an exception, while the docker interface may need to write the information to a file).

[pcoccoli]

I may be wrong about this; it seems the docker analytics interface captures stderr (and/or stdout) so you do see things like python tracebacks:

[subbyte]

yep, we have this supported in both Python and Docker analytics interface.