Files
siem-backend/raw-event.sh
groot c49bfa1c34
Some checks failed
release-tag / release-image (push) Failing after 5m54s
Vollständiges Redesign
2026-07-23 14:45:35 +02:00

12 lines
627 B
Bash
Executable File

#!/usr/bin/env sh
set -eu
cd "$(dirname "$0")"
if [ "$#" -lt 1 ]; then echo "usage: $0 <raw_object_key> [raw_index]" >&2; exit 2; fi
key="$1"; idx="${2:-}"
[ -f .env ] && { set -a; . ./.env; set +a; }
if [ -n "$idx" ] && command -v python3 >/dev/null 2>&1; then
docker compose exec -T archive-uploader rclone cat "garage:${GARAGE_BUCKET:-siem-raw}/$key" | gzip -dc | python3 -c 'import json,sys; d=json.load(sys.stdin); i=int(sys.argv[1]); print(json.dumps(d["events"][i], ensure_ascii=False, indent=2))' "$idx"
else
docker compose exec -T archive-uploader rclone cat "garage:${GARAGE_BUCKET:-siem-raw}/$key" | gzip -dc
fi