intelmq.bots.parsers.vxvault package¶
Submodules¶
intelmq.bots.parsers.vxvault.parser module¶
- intelmq.bots.parsers.vxvault.parser.BOT¶
alias of
VXVaultParserBot
- class intelmq.bots.parsers.vxvault.parser.VXVaultParserBot(*args, **kwargs)¶
Bases:
ParserBot
Parse the VXVault feed
- parse(report)¶
A generator yielding the single elements of the data.
Comments, headers etc. can be processed here. Data needed by self.parse_line can be saved in self.tempdata (list).
Default parser yields stripped lines. Override for your use or use an existing parser, e.g.:
parse = ParserBot.parse_csv
- You should do that for recovering lines too.
recover_line = ParserBot.recover_line_csv
- parse_line(row, report)¶
A generator which can yield one or more messages contained in line.
Report has the full message, thus you can access some metadata. Override for your use.
- recover_line(line)¶
Reverse of “parse” for single lines.
Recovers a fully functional report with only the problematic line by concatenating all strings in “self.tempdata” with “line” with LF newlines. Works fine for most text files.
- Parameters:
line (Optional[str], optional) – The currently process line which should be transferred into it’s original appearance. As fallback, “self._current_line” is used if available (depending on self.parse). The default is None.
- Raises:
ValueError – If neither the parameter “line” nor the member “self._current_line” is available.
- Returns:
- str
The reconstructed raw data.