Skip to content

Commit 1cfb8e1

Browse files
committed
fix fetching sets with no events to collect
1 parent a6f78ef commit 1cfb8e1

File tree

1 file changed

+6
-2
lines changed
  • Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConnector

1 file changed

+6
-2
lines changed

Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConnector/__init__.py

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -154,7 +154,11 @@ def main(mytimer: func.TimerRequest) -> None:
154154
raw_events = []
155155
aggregated_policy_audits = []
156156
policy_audit_raw_event_details = []
157-
for set_id in sets_list.json()["Sets"]:
157+
admin_audit_data = []
158+
sets = sets_list.json().get("Sets") or []
159+
if not sets:
160+
logging.info("No sets with events were found; skipping set-based collection")
161+
for set_id in sets:
158162
logging.info("Collecting aggregated events from {}".format(set_id["Name"]))
159163
aggregated_events += get_events(func_name=getAggregatedEvents, auth=auth, filter_date=filter_date,
160164
set_id=set_id)["events"]
@@ -168,7 +172,7 @@ def main(mytimer: func.TimerRequest) -> None:
168172
policy_audit_raw_event_details += get_events(func_name=getPolicyAuditRawEventDetails,
169173
auth=auth, filter_date=filter_date, set_id=set_id)["events"]
170174
logging.info("Collecting Admin Audit Data from {}".format(set_id["Name"]))
171-
admin_audit_data = getAdminAuditEvents(epmserver=dispatcher, epmToken=auth.json()['EPMAuthenticationResult'], authType='EPM', setid=set_id['Id'], start_time=start_time, end_time=end_time, limit=100)
175+
admin_audit_data += getAdminAuditEvents(epmserver=dispatcher, epmToken=auth.json()['EPMAuthenticationResult'], authType='EPM', setid=set_id['Id'], start_time=start_time, end_time=end_time, limit=100)
172176

173177
# Send data via data collector API
174178
for aggregated_event in aggregated_events:

0 commit comments

Comments
 (0)