From 17306e83705cb32de5d5b68a0ed8a4e8713b19ac Mon Sep 17 00:00:00 2001 From: mo khan Date: Sun, 8 Feb 2015 16:15:56 -0700 Subject: capitalize event type for polymorphic lookup. --- app/controllers/agents/files_controller.rb | 2 +- app/models/lookup.rb | 2 ++ app/models/modified.rb | 2 ++ app/workers/cloud_queries.rb | 2 +- app/workers/event_intake.rb | 4 +++- 5 files changed, 9 insertions(+), 3 deletions(-) create mode 100644 app/models/lookup.rb (limited to 'app') diff --git a/app/controllers/agents/files_controller.rb b/app/controllers/agents/files_controller.rb index 95421e0..0f493fb 100644 --- a/app/controllers/agents/files_controller.rb +++ b/app/controllers/agents/files_controller.rb @@ -13,7 +13,7 @@ module Agents @file = Disposition.find_by(fingerprint: params[:id]) message = { agent_id: params[:id], - type: 'lookup', + type: :lookup, data: params[:data] } Publisher.publish("events.scanned.#{@agent.id}", message) diff --git a/app/models/lookup.rb b/app/models/lookup.rb new file mode 100644 index 0000000..5ccf622 --- /dev/null +++ b/app/models/lookup.rb @@ -0,0 +1,2 @@ +class Lookup < Event +end diff --git a/app/models/modified.rb b/app/models/modified.rb index 46e0f14..d95dd42 100644 --- a/app/models/modified.rb +++ b/app/models/modified.rb @@ -1,2 +1,4 @@ class Modified < Event end +class Lookup < Event +end diff --git a/app/workers/cloud_queries.rb b/app/workers/cloud_queries.rb index fbbe5c4..a1fa68d 100644 --- a/app/workers/cloud_queries.rb +++ b/app/workers/cloud_queries.rb @@ -11,7 +11,7 @@ class CloudQueries fingerprint = attributes["data"]["fingerprint"] disposition = Disposition.find_by(fingerprint: fingerprint) - Disposition.create!(fingerprint: fingerprint, state: :unknown) if disposition.nil? + disposition = Disposition.create!(fingerprint: fingerprint, state: :unknown) if disposition.nil? FingerprintLookupJob.perform_later(fingerprint) if disposition.state == :unknown ack! diff --git a/app/workers/event_intake.rb b/app/workers/event_intake.rb index 7e70497..79be810 100644 --- a/app/workers/event_intake.rb +++ b/app/workers/event_intake.rb @@ -6,7 +6,9 @@ class EventIntake def work(event_json) logger.info event_json - event = Event.create!(JSON.parse(event_json)) + json = JSON.parse(event_json) + json['type'] = json['type'].capitalize + event = Event.create!(json) logger.info("Create Event: #{event.id}") ack! end -- cgit v1.2.3