Vh$ddlmZmZmZeZddlZddlmZddlm Z ddl m Z ddl m Z mZddlmZddlmZd d d Zd Zd ZdZdZGddeZy))absolute_importdivisionprint_functionN)copy)CertificateError)to_text) ConnectionConnectionError) iteritems) quote_pluszapplication/jsonz9.1)z Content-TypeVersionc0d} t|d}|D]r}||vs|rLt||jt|jk(sA||j|fcS|||k(s_||j|fcSy#t$rYwxYw)NFT)r TypeErrorstripindex) some_listkeyvalue text_type some_dicts j/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/ibm/qradar/plugins/module_utils/qradar.pyfind_dict_in_listrsI  A ) 9S>*002gen6J6J6LL$iooi&@@@S>U*$iooi&@@@A     s B BBc |jdr|jdjtdj|jd}|r|dd|jd<n-|j dj|jd|jdr+|jdj |jd<yy) Nclosing_reasonz+api/siem/offense_closing_reasons?filter={0}z text="{0}"ridclosing_reason_idz'Unable to find closing_reason text: {0}status)params get_by_pathformatr fail_jsonupper)moduleqradar_requestfound_closing_reasons rset_offense_valuesr&+s }}%&-99 9 @ @ '' 6F(GH   1Ea1H1NFMM- .   9@@MM"23  }}X"(--"9"?"?"A hcg}|D]Z}t|}t|ts|jD]}||vs|j ||j |\|r|S|S)zThe fn to remove the unsupported keys from payload :param payload: Payload from response :param supported_key_list: Module supported params :rtype: A dict :returns: payload with only supported and module expected params )r isinstancedictkeyspopappend)payloadsupported_key_list temp_payloadeach temp_dict every_keys r)remove_unsupported_keys_from_payload_dictr4AsuL+J dD !!YY[ - $66MM), -    * + Nr'c t|trt|D]\}}t|tr t|"t|ts3i}|D]}t|ts|j ds|j ddk(r|j ddj|jDcgc] }t|c}}|j||i|||<yycc}w)zThe fn to convert list of dict to dict :param input_dict: input list having list of dict :rtype: A dict :returns: dict with converted all list to dict type rr_N) r)r*r list_to_dictlistgetr,joinvaluesstrupdate) input_dictkvr2r1xeach_key_valuess rr7r7Us *d#j) 2DAq!T"QAt$ 2D!$-88D>TXXd^q-@ HHTN*-((-1[[];SV;+"((/4)@A(1 1 2 2$ "     KK ! !5<&"    R" X~ s_,D%,G& G#"+E G#+F G#+G G GGGGG#& G54G5c *|jd|fi|S)NGETr_rOurlkwargss rr9zQRadarRequest.get)t))%???r'c *|jd|fi|S)NPUTrbrcs rputzQRadarRequest.putrfr'c *|jd|fi|S)NPOSTrbrcs rpostzQRadarRequest.posts)t))&#@@@r'c *|jd|fi|S)NPATCHrbrcs rpatchzQRadarRequest.patchs)t))'3A&AAr'c *|jd|fi|S)NDELETErbrcs rdeletezQRadarRequest.deletes)t))(CB6BBr'cN i}|jjD]G}|jj|||jvs,|jj|||<I|S#t$r5}|jj dj |Yd}~yd}~wwxYw)a@ Get the valid fields that should be passed to the REST API as urlencoded data so long as the argument specification to the module follows the convention: - the key to the argspec item does not start with qradar_ - the key does not exist in the not_data_keys list Nzinvalid data type provided: {0}rS)r#rrLrr!r )rO qradar_dataparamr^s rget_datazQRadarRequest.get_datas K++ CKK&&u-:!8!88)-););E)BK&  C    KK ! !5<rs[A@  .G.B!3uE $B,(2.YBFYBr'