graylog-api-client 0.1.0__py3-none-any.whl

graylog_api_client/data_structures.py

@@ -0,0 +1,14 @@
+from typing import List, Dict
+
+
+class GraylogApiResult:
+    def __init__(self, status_code: int, message: str = "", data: List[Dict] = None):
+        """Result returned from low-level RestAdapter
+
+        :param status_code: Standard HTTP Status code
+        :param message: Human readable result
+        :param data: Python List of Dictionaries (or maybe just a single Dictionary on error)
+        """
+        self.status_code = int(status_code)
+        self.message = str(message)
+        self.data = data if data else []

graylog_api_client/exceptions.py

@@ -0,0 +1,2 @@
+class GraylogApiException(Exception):
+    pass

graylog_api_client/graylog_api_client.py

@@ -0,0 +1,119 @@
+import logging
+from typing import Union, Dict
+from src.graylog_api_client.rest_adapter import RestAdapter
+from src.graylog_api_client.data_structures import GraylogApiResult
+
+
+class GraylogAPI:
+    def __init__(self, host: str, api_key: str, ssl_verify: Union[str, bool] = True, logger: logging.Logger = None):
+        self._rest_adapter = RestAdapter(host=host, api_key=api_key, ssl_verify=ssl_verify, logger=logger)
+    # The endpoints grouped like they are in the api-browser
+    # /authz Authorization
+    def get_auth_grants_overview(self) -> GraylogApiResult:
+        overview = self._rest_adapter.get("authz/grants-overview")
+        return overview
+
+    def get_auth_roles(self, parameters: Dict = None) -> GraylogApiResult:
+        roles = self._rest_adapter.get("authz/roles", parameters)
+        return roles
+
+    def get_auth_roles_of_user(self, username: str, parameters: Dict = None) -> GraylogApiResult:
+        roles = self._rest_adapter.get(f"authz/roles/user/{username}", parameters)
+        return roles
+
+    def get_auth_role_by_id(self, role_id: str) -> GraylogApiResult:
+        roles = self._rest_adapter.get(f"authz/roles/{role_id}")
+        return roles
+
+    def get_auth_assignees_of_role(self, role_id: str, parameters: Dict = None) -> GraylogApiResult:
+        assignees = self._rest_adapter.get(f"authz/roles/{role_id}/assignees", parameters)
+        return assignees
+
+    # /ca
+    def get_ca(self) -> GraylogApiResult:
+        result = self._rest_adapter.get("ca")
+        return result
+
+    # /certificates
+    def get_certificates(self) -> GraylogApiResult:
+        result = self._rest_adapter.get("certificates")
+        return result
+
+    # /cluster
+    def get_cluster(self) -> GraylogApiResult:
+        result = self._rest_adapter.get("cluster")
+        return result
+
+    def get_processbufferdump(self, node_id: str = "") -> GraylogApiResult:
+        result = self._rest_adapter.get(f"cluster/{node_id}/processbufferdump".replace("//", "/"))
+        return result
+
+    def get_jvminfo(self, node_id: str) -> GraylogApiResult:
+        result = self._rest_adapter.get(f"cluster/{node_id}/jvm")
+        return result
+
+    # /contentstream
+    # /dashboards
+    # /datanodes
+    # /datanode
+    # /api-docs API-Documentation
+    # /enterprise
+    # /entitylists
+    # /entity_scopes
+    # /entity_suggestions
+    # /events
+    # /system/inputs/{inputId}/extractors Extractors
+    # /favorites
+    # /views/fields FieldTypes
+    # /system/indexer Indexer
+    # /search/universal/absolute Legacy Message Search
+    # /messages
+    # /migration
+    # /system/pipelines Pipelines
+    # /plugins
+    # /remote-reindex-migration
+    # /roles
+    # /views/search Search
+    # /search Search Options (Decorators, Export, Functions etc.)
+    # /views/searchjobs Searchjobs
+    # /sidecars
+    # /sidecar
+    # /startpage
+    # /system/inputs/{inputId}/staticfields Staticfields
+    # /streams
+    def get_streams(self) -> GraylogApiResult:
+        result = self._rest_adapter.get("streams")
+        return result
+
+    # /system Main System endpoints
+    # /telemetry
+    # /token_usage
+    # /users
+    def get_users(self, parameters: Dict = None) -> GraylogApiResult:
+        result = self._rest_adapter.get("users", parameters)
+        return result
+
+    def get_users_paginated(self, parameters: Dict = None) -> GraylogApiResult:
+        result = self._rest_adapter.get("users/paginated", parameters)
+        return result
+
+    def get_user_by_id(self, user_id: str) -> GraylogApiResult:
+        result = self._rest_adapter.get(f"users/id/{user_id}")
+        return result
+
+    def get_user_by_username(self, username: str) -> GraylogApiResult:
+        result = self._rest_adapter.get(f"users/{username}")
+        return result
+
+    def get_user_tokens_by_id(self, user_id: str) -> GraylogApiResult:
+        result = self._rest_adapter.get(f"users/{user_id}/tokens")
+        return result
+
+    # /views Main Views Endpoints
+    def get_views(self, parameters: Dict = None) -> GraylogApiResult:
+        result = self._rest_adapter.get("views", parameters)
+        return result
+
+    def get_view_by_id(self, view_id: str) -> GraylogApiResult:
+        result = self._rest_adapter.get(f"views/{view_id}")
+        return result

graylog_api_client/rest_adapter.py

@@ -0,0 +1,98 @@
+import os
+import requests
+import logging
+from typing import Dict, Union
+
+from src.graylog_api_client.exceptions import GraylogApiException
+from src.graylog_api_client.data_structures import GraylogApiResult
+
+
+class RestAdapter:
+    def __init__(self, host: str, api_key: str, ssl_verify: Union[str, bool] = True, logger: logging.Logger = None):
+        """Constructor for RestAdapter
+
+        :param host: The hostname of the Graylog API endpoint plus the protocol. Example: https://graylog.com/api
+        :param api_key: An API Key to authenticate with Graylog
+        :param ssl_verify: Enables or Disables TLS Certificate verification. For a custom certificate, this value must a path pointing to the certificate, defaults to True
+        :param logger: The logger being used by the Adapter, will use a new one if none is given, defaults to None
+        """
+        self._logger = logger or logging.getLogger(__name__)
+        self.host = host + "/"
+        self._api_key = api_key
+        self._ssl_verify = ssl_verify
+        self._session = requests.Session()
+        self._session.headers.update({"Accept": "application/json"})
+        self._session.auth = (self._api_key, "token")  # Graylog uses the format Basic Auth: "<API-token>:token"
+        if not ssl_verify:
+            requests.packages.urllib3.disable_warnings()
+
+    def _do(self, method: str, endpoint: str, parameters: Dict = None, data: Dict = None) -> GraylogApiResult:
+        """Run the HTTP Requests.
+
+        :param method: The HTTP Method that this request will use.
+        :param endpoint: The API endpoint that this request goes to. Example: /streams.
+        :param parameters: Dictionary to be sent in the query string of the Request.
+        :param data: Dictionary to be sent in the body of the Request.
+        :raises GraylogApiException: Generic Exception for Errors caused within the Adapter.
+        :return: An object containing the Result of the API request.
+        """
+        url = self.host + endpoint
+        log_line_pre = f"method={method}, url={url}, parameters={parameters}"
+        log_line_post = ', '.join((log_line_pre, "success={}, status_code={}, message={}"))
+        try:
+            self._logger.debug(msg=log_line_pre)
+            response = self._session.request(method=method, url=url, verify=self._ssl_verify, params=parameters, json=data)
+        except requests.exceptions.RequestException as e:
+            self._logger.error(msg=str(e))
+            raise GraylogApiException("Invalid API Response") from e
+        try:
+            data = response.json()
+        except (ValueError, requests.exceptions.JSONDecodeError) as e:
+            self._logger.error(msg=log_line_post.format(False, None, e))
+            raise GraylogApiException("Bad JSON in response") from e
+        is_success = 299 >= response.status_code >= 200  # OK
+        log_line = log_line_post.format(is_success, response.status_code, response.reason)
+        if is_success:
+            self._logger.debug(msg=log_line)
+            return GraylogApiResult(status_code=response.status_code, message=response.reason, data=data)
+        self._logger.error(msg=log_line)
+        raise GraylogApiException(f"{response.status_code}: {response.reason}")
+
+    def get(self, endpoint: str, parameters: Dict = None) -> GraylogApiResult:
+        """Send a GET request to the API.
+
+        :param endpoint: The API endpoint that this request goes to. Example: /streams.
+        :param parameters: Dictionary to be sent in the query string of the Request.
+        :return: An object containing the Result of the API request.
+        """
+        return self._do(method="GET", endpoint=endpoint, parameters=parameters)
+
+    def post(self, endpoint: str, parameters: Dict = None, data: Dict = None) -> GraylogApiResult:
+        """Send a POST request to the API.
+
+        :param endpoint: The API endpoint that this request goes to. Example: /streams.
+        :param parameters: Dictionary to be sent in the query string of the Request.
+        :param data: Dictionary to be sent in the body of the Request.
+        :return: An object containing the Result of the API request.
+        """
+        return self._do(method="POST", endpoint=endpoint, parameters=parameters, data=data)
+
+    def delete(self, endpoint: str, parameters: Dict = None, data: Dict = None) -> GraylogApiResult:
+        """Send a DELETE request to the API.
+
+        :param endpoint: The API endpoint that this request goes to. Example: /streams.
+        :param parameters: Dictionary to be sent in the query string of the Request.
+        :param data: Dictionary to be sent in the body of the Request.
+        :return: An object containing the Result of the API request.
+        """
+        return self._do(method="DELETE", endpoint=endpoint, parameters=parameters, data=data)
+
+    def put(self, endpoint: str, parameters: Dict = None, data: Dict = None) -> GraylogApiResult:
+        """Send a PUT request to the API.
+
+        :param endpoint: The API endpoint that this request goes to. Example: /streams.
+        :param parameters: Dictionary to be sent in the query string of the Request.
+        :param data: Dictionary to be sent in the body of the Request.
+        :return: An object containing the Result of the API request.
+        """
+        return self._do(method="PUT", endpoint=endpoint, parameters=parameters, data=data)

graylog_api_client-0.1.0.dist-info/METADATA

@@ -0,0 +1,28 @@
+Metadata-Version: 2.4
+Name: graylog-api-client
+Version: 0.1.0
+Summary: 
+Author: Chrxxxxs
+Author-email: 134285960+Chrxxxxs@users.noreply.github.com
+Requires-Python: >=3.13
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: requests (>=2.32.5,<3.0.0)
+Description-Content-Type: text/markdown
+
+### This is a low level Graylog API Wrapper heavily based on the guide by [pretzel](https://www.pretzellogix.net/2021/12/08/how-to-write-a-python3-sdk-library-module-for-a-json-rest-api/).
+As there are a lot of endpoints not all of them are implemented by now. I started by implementing the GET requests first.
+Also the API responses all follow very different schemas and an implementation of that into Python is probably not worth the effort which is why the responses from this API are so low-level.
+Feel free to add endpoints or schemas in PRs if you need them :)
+#### Last tested Graylog Version is: 6.3.4
+
+Planned:
+1. Tests that run against a Graylog instance to check if the Wrapper works after Graylog Updates
+
+
+### Test Environment:
+1. Install docker and docker-compose
+2. Copy the sample docker-compose file by [Graylog](https://github.com/Graylog2/docker-compose) for the open-core and create a .env file with the needed values
+3. docker-compose up
+4. Log in and create an api-key

graylog_api_client-0.1.0.dist-info/RECORD

@@ -0,0 +1,8 @@
+graylog_api_client/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+graylog_api_client/data_structures.py,sha256=rLJ0_0t4j3mhk5lRyNkw9cD7Z_hYLHKxPk91YjYreoo,538
+graylog_api_client/exceptions.py,sha256=hUQSv71dOAsI8iohbPeisj7_hXcMQcnbpjQO7IesLIw,49
+graylog_api_client/graylog_api_client.py,sha256=LU5XvVX3-IWP0YNTPViOkItyDk7u9AsbnxV_IqzqNew,4372
+graylog_api_client/rest_adapter.py,sha256=tQJT5q4cfjVKrRcSzsda8D2xjgEnfX_4Kn1bPTZ5SoI,5476
+graylog_api_client-0.1.0.dist-info/METADATA,sha256=X6CCQj1B52pSEnDclA1nPalD_Bj2x0FF05wWccy_dTk,1395
+graylog_api_client-0.1.0.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+graylog_api_client-0.1.0.dist-info/RECORD,,

graylog_api_client-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: poetry-core 2.2.1
+Root-Is-Purelib: true
+Tag: py3-none-any