intelmq.bots.experts.filter package

Submodules

intelmq.bots.experts.filter.expert module

intelmq.bots.experts.filter.expert.BOT

alias of FilterExpertBot

class intelmq.bots.experts.filter.expert.FilterExpertBot(*args, **kwargs)

Bases: ExpertBot

Filter events, supports named paths for splitting the message flow

doFilter(event, key, condition)

equalsFilter(event, key, value)

filter_action: str = None

filter_key: str = None

filter_regex: str = None

filter_value: str = None

init()

not_after = None

not_before = None

parse_timeattr(time_attr)

Parses relative or absolute time specification, decides how to parse by checking if the string contains any timespan identifier.

See also https://github.com/certtools/intelmq/issues/1523 dateutil.parser.parse detects strings like 10 hours as absolute time.

process()

regexSearchFilter(event, key)

Module contents