INNER CODE UNIT · Python

extract_log_types_from_yaml

panther-labs/panther-analysis · .scripts/generate_indexes.py:161

def extract_log_types_from_yaml(yaml, query_lookup, logtype_lookup):
    if 'LogTypes' in yaml:
        return yaml['LogTypes']
    if 'ScheduledQueries' in yaml:
        for query in yaml['ScheduledQueries']:
            if query in query_lookup:
                query_yaml = query_lookup[query]
                sql = ''
                if 'Query' in query_yaml:
                    sql = query_yaml['Query']
                elif 'SnowflakeQuery' in query_yaml:
                    sql = query_yaml['SnowflakeQuery']
                elif 'DatabricksQuery' in query_yaml:
                    sql = query_yaml['DatabricksQuery']
                return extract_logtypes_from_sql(sql, logtype_lookup)

    if 'Query' in yaml:
        return extract_logtypes_from_sql(yaml['Query'], logtype_lookup)

View source record →