Creates the flare index

Makefile

@@ -100,6 +100,9 @@ lint: setup-web venv-tools mypy format-check
 mypy: venv-tools
 	venv-tools/bin/mypy --config-file mypy.ini packages/flare
 
+.PHONY: sl
+sl: splunk-local
+
 .PHONY: splunk-local
 splunk-local: venv setup-web
 	@echo "Create symlink from app to Splunk Enterprise and start watching files"

packages/configuration-screen/src/components/ConfigurationCompletedStep.tsx

@@ -1,4 +1,4 @@
-import React, { FC } from 'react';
+import React, { FC, useEffect, useState } from 'react';
 import Button from './Button';
 import { getFlareDataUrl } from '../utils/setupConfiguration';
 import ArrowRightIcon from './icons/ArrowRightIcon';
@@ -10,6 +10,17 @@ const ConfigurationCompletedStep: FC<{
     tenantName: string;
     onBackClicked: () => void;
 }> = ({ show, tenantName, onBackClicked }) => {
+    const [index, setIndex] = useState<string>();
+
+    useEffect(() => {
+        const getIndex = async () => {
+            const index: string = await getFlareDataUrl();
+            setIndex(index);
+        };
+
+        getIndex();
+    }, []);
+
     return (
         <div hidden={!show}>
             <h5>
@@ -23,7 +34,7 @@ const ConfigurationCompletedStep: FC<{
                         Edit Configuration
                     </Button>
                     <div className="link">
-                        <a href={getFlareDataUrl('main')}>View Flare Data</a>
+                        <a href={index}>View Flare Data</a>
                         <ArrowRightIcon remSize={1} />
                     </div>
                 </div>

packages/configuration-screen/src/models/splunk.ts

@@ -31,6 +31,7 @@ export interface ConfigurationStanzaAccessor {
     update: (properties: Record<string, string>) => void;
     list: () => Array<{ name: string }>;
     properties: () => Record<string, string>;
+    _properties: Record<string, string>;
 }
 
 export interface ConfigurationFileAccessor {

packages/configuration-screen/src/utils/configurationFileHelper.ts

@@ -138,3 +138,29 @@ export async function updateConfigurationFile(
     // change the information of a property
     await updateStanzaProperties(configurationStanzaAccessor, properties);
 }
+
+export async function getCurrentIndex(service: SplunkService): Promise<string> {
+    // Retrieve the accessor used to get a configuration file
+    let configurations = service.configurations({
+        // Name space information not provided
+    });
+    configurations = await promisify(configurations.fetch)();
+
+    // Retrieves the configuration file accessor
+    let configurationFileAccessor = getConfigurationFile(configurations, 'inputs');
+    configurationFileAccessor = await promisify(configurationFileAccessor.fetch)();
+
+    // Retrieves the configuration stanza accessor
+    let configurationStanzaAccessor = getConfigurationFileStanza(
+        configurationFileAccessor,
+        'script://$SPLUNK_HOME/etc/apps/flare/bin/cron_job_ingest_events.py'
+    );
+    configurationStanzaAccessor = await promisify(configurationStanzaAccessor.fetch)();
+
+    let currentIndex = 'main';
+    if (configurationStanzaAccessor._properties.hasOwnProperty('index')) {
+        currentIndex = configurationStanzaAccessor._properties['index'];
+    }
+
+    return currentIndex;
+}

packages/configuration-screen/src/utils/setupConfiguration.ts

@@ -1,4 +1,4 @@
-import { updateConfigurationFile } from './configurationFileHelper';
+import { updateConfigurationFile, getCurrentIndex } from './configurationFileHelper';
 import { Tenant } from '../models/flare';
 import {
     PasswordKeys,
@@ -43,7 +43,10 @@ function getRedirectUrl(): string {
     return `/app/${appName}`;
 }
 
-function getFlareDataUrl(indexName: string): string {
+async function getFlareDataUrl(): Promise<string> {
+    const service = createService(applicationNameSpace);
+    const indexName = await getCurrentIndex(service);
+
     return `/app/${appName}/search?q=search%20index%3D"${indexName}"%20source%3D"flare"`;
 }
 

packages/flare/bin/cron_job_ingest_events.py

@@ -25,6 +25,7 @@
 
 
 def main(logger: Logger, app: client.Application) -> None:
+    create_flare_index(app.service)
     create_collection(app=app)
 
     # To avoid cron jobs from doing the same work at the same time, exit new cron jobs if a cron job is already doing work
@@ -62,6 +63,11 @@ def main(logger: Logger, app: client.Application) -> None:
     logger.info(f"Retrieved {events_retrieved_count} events")
 
 
+def create_flare_index(service: Service) -> None:
+    if APP_NAME not in service.indexes:
+        service.indexes.create(APP_NAME)
+
+
 def get_storage_password_value(
     app: client.Application, password_key: str
 ) -> Optional[str]:

packages/flare/tests/bin/test_flare_wrapper.py

@@ -2,6 +2,7 @@
 import pytest
 import sys
 
+from typing import Any
 from unittest.mock import MagicMock
 from unittest.mock import Mock
 from unittest.mock import PropertyMock
@@ -53,7 +54,9 @@ def test_flare_full_data_without_metadata(
 
 @patch("flare.FlareAPI._retrieve_full_event_from_uid")
 @patch("flare.FlareAPI._retrieve_event_feed_metadata")
+@patch("time.sleep", return_value=None)
 def test_flare_full_data_with_metadata(
+    sleep: Any,
     retrieve_event_feed_metadata_mock: MagicMock,
     retrieve_full_event_from_uid_mock: MagicMock,
 ) -> None:

packages/flare/tests/bin/test_ingest_events.py

@@ -14,9 +14,11 @@
 
 
 sys.path.insert(0, os.path.join(os.path.dirname(__file__), "../../bin"))
+from constants import APP_NAME
 from constants import CRON_JOB_THRESHOLD_SINCE_LAST_FETCH
 from constants import KV_COLLECTION_NAME
 from constants import CollectionKeys
+from cron_job_ingest_events import create_flare_index
 from cron_job_ingest_events import fetch_feed
 from cron_job_ingest_events import get_api_key
 from cron_job_ingest_events import get_collection_value
@@ -29,6 +31,19 @@
 from cron_job_ingest_events import save_start_date
 
 
+def test_create_flare_index_expect_none() -> None:
+    app = MagicMock()
+    app.service.indexes.__contains__.side_effect = lambda x: x == APP_NAME
+    create_flare_index(app.service)
+    app.service.indexes[APP_NAME].assert_not_called()
+
+
+def test_create_flare_index_expect_create() -> None:
+    app = MagicMock()
+    create_flare_index(app.service)
+    app.service.indexes.create.assert_called_once_with(APP_NAME)
+
+
 def test_get_collection_value_expect_none() -> None:
     app = MagicMock()
     assert get_collection_value(app=app, key="some_key") is None