Commitf52d738

committed

query parts join method

1 parent8a06b99 commitf52d738Copy full SHA for f52d738

File tree

-2

lines changed

uncoder-core/app/translator
- core
  - render.py
- platforms/palo_alto/renders
  - cortex_xsiam.py

-2

lines changed

Lines changed: 6 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -197,6 +197,7 @@ class PlatformQueryRender(QueryRender):`
`197`	`197`	`not_token="not"`
`198`	`198`
`199`	`199`	`group_token="(%s)"`
	`200`	`+query_parts_delimiter=" "`
`200`	`201`
`201`	`202`	`field_value_map=BaseQueryFieldValue(or_token=or_token)`
`202`	`203`
`@@ -284,6 +285,10 @@ def wrap_query_with_meta_info(self, meta_info: MetaInfoContainer, query: str) ->`
`284`	`285`	`def_finalize_search_query(query:str)->str:`
`285`	`286`	`returnquery`
`286`	`287`
	`288`	`+def_join_query_parts(self,prefix:str,query:str,functions:str)->str:`
	`289`	`+parts=filter(lambdas:bool(s),map(str.strip, [prefix,self._finalize_search_query(query),functions]))`
	`290`	`+returnself.query_parts_delimiter.join(parts)`
	`291`	`+`
`287`	`292`	`deffinalize_query(`
`288`	`293`	`self,`
`289`	`294`	`prefix:str,`
`@@ -295,8 +300,7 @@ def finalize_query(`
`295`	`300`	`*args,# noqa: ARG002`
`296`	`301`	`**kwargs,# noqa: ARG002`
`297`	`302`	`)->str:`
`298`		`-parts=filter(lambdas:bool(s),map(str.strip, [prefix,self._finalize_search_query(query),functions]))`
`299`		`-query=" ".join(parts)`
	`303`	`+query=self._join_query_parts(prefix,query,functions)`
`300`	`304`	`query=self.wrap_query_with_meta_info(meta_info=meta_info,query=query)`
`301`	`305`	`ifnot_supported_functions:`
`302`	`306`	`rendered_not_supported=self.render_not_supported_functions(not_supported_functions)`

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -147,6 +147,7 @@ class CortexXQLQueryRender(PlatformQueryRender):`
`147`	`147`	`or_token="or"`
`148`	`148`	`and_token="and"`
`149`	`149`	`not_token="not"`
	`150`	`+query_parts_delimiter=""`
`150`	`151`
`151`	`152`	`field_value_map=CortexXQLFieldValue(or_token=or_token)`
`152`	`153`	`comment_symbol="//"`

Comments

(0)