NAME

Ixchel::Actions::sagan_merged - Generated a merged base/include for Sagan.

VERSION

Version 0.2.0

CLI SYNOPSIS

ixchel -a sagan_merged [--np] [-w] [-i <instance>]

CODE SYNOPSIS

    use Data::Dumper;

    my $results=$ixchel->action(action=>'sagan_base', opts=>{np=>1, w=>1, });

    print Dumper($results);

DESCRIPTION

.sagan.base_config is used as the URL for the config to use and needs to be something understood by Ixchel::functions::file_get. By default https://raw.githubusercontent.com/quadrantsec/sagan/main/etc/sagan.yaml is used.

The following arrays are blanked in the file.

    .rules-files
    .processors
    .outputs

These are removed as they are array based, making it very awkward to deal with with having them previously defined.

A include is then generated using .sagan.config. If .sagan.multi_instance is set to 1, then .sagan.instances.$instance is merged on top of it using HASH::Merge with RIGHT_PRECEDENT as below with arrays being replaced. This is then generated and merged into the base file file using yq.

.include is set to .sagan.config_base.'/sagan-rules.yaml' in the case of single instance setups if .sagan.multi_instance is set to 1 then .sagan.config_base."/sagan-$instance-rules.yaml"

FLAGS

-w

Write out the configs.

-i instance

A instance to operate on.

RESULT HASH REF

    .errors :: A array of errors encountered.
    .status_text :: A string description of what was done and teh results.
    .ok :: Set to zero if any of the above errored.