logstash-filter-greynoise 0.1.6 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 770fe4cfb474728588617ecb1c8c4bbf62e068befba16d9597bf2faa366f0059
-  data.tar.gz: 5b412561f650fb8b3d993f418326b634344b4a627d90461250ea822422e80b8c
+  metadata.gz: a71aad2c5c6984ec9021757f07fb9df22117fad154368a65916673602e76b286
+  data.tar.gz: e29ffb288550c1dae21245d3b22d00bf3149090923bacd4285054bf3aea24aa0
 SHA512:
-  metadata.gz: 0b1fddfb2a5509caa5712407c0c1087fe9ebb026605ea7516d4d01d490455bb890a98c9258e59c24325e6db4aed161106cd7231912810346f45b646ac12bd4f6
-  data.tar.gz: 25ef1b38d123e1f3ffebead3879083a28ddca0af759dc2b8a57a698a7f81f4a80762a32ef2b51197806f5a85d7532bfa7e8fd4cea5525c7c602d6efbda2d9107
+  metadata.gz: 5a7970993a6c48f376508e61722f4668cac2b2e614dc359a4aa1bc2903f5efde5150f7bc7ed348260f6d93da751815aea6e015f5c2c3390cea52f147430e5702
+  data.tar.gz: 773319bb84fb3857b2183177a309a2e6853f399f54228127328e262b1858ab5a2743ec734f43efdd79b5a3905ce2d947d2dcd5fcf94e2db68bc6645d70234c7a

data/README.md

@@ -22,7 +22,7 @@ Or you can build it yourself:
 git clone https://github.com/nicksherron/logstash-filter-greynoise.git
 bundle install
 gem build logstash-filter-greynoise.gemspec
-$LS_HOME/bin/logstash-plugin install logstash-filter-greynoise-0.1.6.gem
+$LS_HOME/bin/logstash-plugin install logstash-filter-greynoise-0.1.7.gem
 ```
 
 ### 2. Filter Configuration

data/lib/logstash/filters/greynoise.rb

@@ -2,7 +2,6 @@
 require 'logstash/filters/base'
 require "json"
 require "logstash/namespace"
-require "faraday"
 require "ipaddr"
 require "lru_redux"
 
@@ -49,27 +48,48 @@ class LogStash::Filters::Greynoise < LogStash::Filters::Base
       @hit_cache = LruRedux::TTL::ThreadSafeCache.new(@hit_cache_size, @hit_cache_ttl)
     end
 
-  end # def register
+  end
+
+  # def register
 
   private
 
   def get_free(target_ip)
-    url = "https://api.greynoise.io/v1/query/ip"
-    response = Faraday.post url, {:ip => target_ip}, 'User-Agent' => 'logstash-filter-greynoise'
-    if response.success?
+
+    uri = URI.parse("http://api.greynoise.io/v1/query/ip")
+    request = Net::HTTP::Post.new(uri)
+    request.set_form_data(
+        "ip" => target_ip,
+    )
+
+    req_options = {
+        use_ssl: uri.scheme == "https",
+    }
+    response = Net::HTTP.start(uri.hostname, uri.port, req_options) do |http|
+      http.request(request)
+    end
+    if response.is_a?(Net::HTTPSuccess)
       JSON.parse(response.body)
     else
       nil
     end
   end
 
+
   private
 
   def get_enterprise(target_ip, api_key)
-    url = "https://enterprise.api.greynoise.io/v2/noise/context/" + target_ip
-    uri = URI.parse(URI.encode(url.strip))
-    response = Faraday.get(uri, nil, 'User-Agent' => 'logstash-filter-greynoise', Key: api_key)
-    if response.success?
+    uri = URI.parse("https://enterprise.api.greynoise.io/v2/noise/context/" + target_ip)
+    request = Net::HTTP::Get.new(uri)
+    request["Key"] = api_key
+    request["User-Agent"] = "logstash-filter-greynoise"
+    req_options = {
+        use_ssl: uri.scheme == "https",
+    }
+    response = Net::HTTP.start(uri.hostname, uri.port, req_options) do |http|
+      http.request(request)
+    end
+    if response.is_a?(Net::HTTPSuccess)
       JSON.parse(response.body)
     else
       nil
@@ -123,6 +143,8 @@ class LogStash::Filters::Greynoise < LogStash::Filters::Base
         end
       end
     end
-  end # def filter
+  end
+
+  # def filter
 end # def LogStash::Filters::Greynoise
 

data/logstash-filter-greynoise.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name          = 'logstash-filter-greynoise'
-  s.version       = '0.1.6'
+  s.version       = '0.1.7'
   s.licenses      = ['Apache-2.0']
   s.summary = 'This greynoise filter takes contents in the ip field and returns greynoise api data (see https://greynoise.io/ for more info).'
   s.description     = 'This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install logstash-filter-greynoise. This gem is not a stand-alone program'
@@ -20,7 +20,6 @@ Gem::Specification.new do |s|
   # Gem dependencies
   s.add_runtime_dependency "logstash-core-plugin-api", ">= 1.60", "<= 2.99"
   s.add_development_dependency 'logstash-devutils'
-  s.add_runtime_dependency  'faraday', '= 0.17.1'
   s.add_runtime_dependency 'lru_redux', "~> 1.1.0"
 
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-filter-greynoise
 version: !ruby/object:Gem::Version
-  version: 0.1.6
+  version: 0.1.7
 platform: ruby
 authors:
 - nsherron90
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-01-24 00:00:00.000000000 Z
+date: 2020-05-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -44,20 +44,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-- !ruby/object:Gem::Dependency
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.17.1
-  name: faraday
-  prerelease: false
-  type: :runtime
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.17.1
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
     requirements: