elasticctl-api 0.10.0

Typed detection-rule model and endpoint wrappers for Elastic Security.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

use super::*;

#[derive(Default, Clone, Copy)]
pub(super) struct ExceptionCounts {
    pub(super) lists_created: usize,
    pub(super) lists_updated: usize,
    pub(super) items_created: usize,
    pub(super) items_updated: usize,
    pub(super) items_removed: usize,
}

pub(super) fn push_summary(
    report: &ChangeReport,
    selected: Option<usize>,
    local_total: Option<usize>,
    out_of_scope: usize,
    counts: ExceptionCounts,
) -> PushReport {
    let (created, updated, skipped, failed) = report.counts();
    PushReport {
        value_lists_created: 0,
        value_lists_updated: 0,
        values_added: 0,
        values_removed: 0,
        value_lists_unknown: 0,
        value_lists_not_reached: 0,
        applied: report.applied,
        created,
        updated,
        skipped_remote_only: skipped,
        failed,
        pending: report.pending(),
        lists_created: counts.lists_created,
        lists_updated: counts.lists_updated,
        items_created: counts.items_created,
        items_updated: counts.items_updated,
        items_removed: counts.items_removed,
        out_of_scope,
        selected,
        local_total,
    }
}

pub(super) fn update_value_summary(plan: &mut PushPlan) {
    use crate::value_lists::{Action, ContainerAction, Outcome};
    let summary = &mut plan.summary;
    summary.applied = plan.report.applied;
    for outcome in &plan.value_list_outcomes {
        let list = plan
            .values
            .plans
            .iter()
            .find(|p| p.local.container.id == outcome.id)
            .expect("outcome has a plan");
        match outcome.outcome {
            Outcome::Applied => {
                if list.container_action == ContainerAction::Create {
                    summary.value_lists_created += 1;
                } else if list.container_action == ContainerAction::Update
                    || !list.adds.is_empty()
                    || !list.removes.is_empty()
                {
                    summary.value_lists_updated += 1;
                }
            }
            Outcome::Unknown => {
                summary.value_lists_unknown += 1;
                summary.failed += 1;
            }
            Outcome::NotReached => summary.value_lists_not_reached += 1,
            Outcome::Failed => summary.failed += 1,
        }
        for entry in &outcome.evidence {
            if entry.phase_verified {
                let count = entry.values.as_ref().map_or(0, Vec::len);
                match entry.action {
                    Action::AddValues => summary.values_added += count,
                    Action::RemoveValues => summary.values_removed += count,
                    _ => {}
                }
            }
        }
    }
}