intelmq.bots.experts.filter package

Submodules

intelmq.bots.experts.filter.expert module

intelmq.bots.experts.filter.expert.BOT

alias of intelmq.bots.experts.filter.expert.FilterExpertBot

class intelmq.bots.experts.filter.expert.FilterExpertBot(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: bool = None)

Bases: intelmq.lib.bot.Bot

doFilter(event, key, condition)
equalsFilter(event, key, value)
init()
parse_timeattr(time_attr)

Parses relative or absolute time specification, decides how to parse by checking if the string contains any timespan identifier.

See also https://github.com/certtools/intelmq/issues/1523 dateutil.parser.parse detects strings like 10 hours as absolute time.

process()
regexSearchFilter(event, key)

Module contents