fix: Update integration name to SOCFORTRESS AI in alert requests
Taylor committed
Nov 14, 2024 at 08:45 UTC
b544f43a0af7a46eeed7297cfe546c206248de63
1 file changed
+4
-2
backend/app/threat_intel/routes/socfortress.py
+4
-2
@@ -146,7 +146,7 @@ async def ai_anaylze_alert_socfortress(
146
assert isinstance(alert_details, GenericAlertModel)
147
148
request = SocfortressAiAlertRequest(
149
- integration="AI",
149
+ integration="SOCFORTRESS AI",
150
alert_payload=alert_details._source.dict(),
151
)
152
@@ -173,10 +173,12 @@ async def ai_wazuh_exclusion_rule_socfortress(
173
assert isinstance(alert_details, GenericAlertModel)
174
175
request = SocfortressAiAlertRequest(
176
- integration="AI",
176
+ integration="SOCFORTRESS AI",
177
alert_payload=alert_details._source.dict(),
178
)
179
180
+ logger.info(f"Sending request: {request}")
181
+
182
socfortress_lookup = await socfortress_wazuh_exclusion_rule_lookup(
183
lincense_key=(await get_license(session)).license_key,
184
request=request,