Describe the bug I followed the docs here: <a href="https://www.f

Hi <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="

Yes it still includes the data_file argument <div class="snippet-clipboard-content

[ BUG ] Crowdstrike API returning 406 when uploading a Fusion Workflow about falconpy HOT 5 CLOSED

RoemIko commented on May 24, 2024

[ BUG ] Crowdstrike API returning 406 when uploading a Fusion Workflow

from falconpy.

Comments (5)

jshcodes commented on May 24, 2024

Hi @RoemIko -

Thank you for reporting this issue!

We have confirmed this issue as a bug, and have a fix ready for the 1.4.3 version. In the interim, here is a work around leveraging the Uber Class that should also accomplish what you are trying to do.

from os import listdir
from falconpy import APIHarnessV2


def import_workflows():
    path_to_workflows_folder = "/home/REDACTED/workflows/

    falcon_w = APIHarnessV2(client_id=CLIENT_ID,
                            client_secret=CLIENT_SECRET
                            )

    for filename in listdir(path_to_workflows_folder):
        if filename.endswith(".yaml") or filename.endswith(".yml"):
            print(f'Importing {filename}')
            with open(f'{path_to_workflows_folder + filename}', 'r') as yaml_file:
                file_data = {"data_file": yaml_file.read(), "type": "application/x-yaml"}
                workflow_response = falcon_w.command("WorkflowDefinitionsImport", files=file_data)
                print(f'Workflow Response: {workflow_response}')
                if workflow_response['status_code'] == 200:
                    print(f'Workflow {filename} imported successfully')
                else:
                   print(f'Workflow {filename} failed to import')

from falconpy.

RoemIko commented on May 24, 2024

Hi @jshcodes,

Thank you for looking into it 🙏 , and many thanks for the workaround

from falconpy.

RoemIko commented on May 24, 2024

I have updated falconpy to 1.4.3 but now i receive an error 500 with "Keyword arguments are required to use this method." This happens when i use the initial code from the beginning of this thread

from falconpy.

jshcodes commented on May 24, 2024

Can we see your call to import_definition? It still just includes the data_file argument?

from falconpy.

RoemIko commented on May 24, 2024

Yes it still includes the data_file argument

from os import listdir

def import_workflows():
    path_to_workflows_folder = "/home/REDACTED/workflows/

    falcon_w = Workflows(client_id=CLIENT_ID,
                   client_secret=CLIENT_SECRET
                   )

    for filename in listdir(path_to_workflows_folder):
        if filename.endswith(".yaml") or filename.endswith(".yml"):
            print(f'Importing {filename}')
            with open(f'{path_to_workflows_folder + filename}', 'r') as yaml_file:
                workflow_response = falcon_w.import_definition(data_file=yaml_file)
                print(f'Workflow Response: {workflow_response}')
                if workflow_response['status_code'] == 200:
                    print(f'Workflow {filename} imported successfully')
                else:
                   print(f'Workflow {filename} failed to import')

from falconpy.

Recommend Projects