@Test public void getCompliantHostsBySeverityTest() throws Exception { String response1 = "{\"aggregations\":{\"severity\":{\"buckets\":[{\"key\":4,\"doc_count\":320}," + "{\"key\":3,\"doc_count\":294},{\"key\":5,\"doc_count\":71}]}}}"; String response2 = "{\"aggregations\":{\"resourceid\":{\"buckets\":[{\"key\":\"123\"},{\"key\":\"456\"}]}}}"; mockStatic(PacHttpUtils.class); when(PacHttpUtils.doHttpPost(anyString(), anyString())).thenReturn(response2, response1); ReflectionTestUtils.setField(vulnerabilityRepository, "esUrl", "dummyEsURL"); assertTrue(vulnerabilityRepository.getCompliantHostsBySeverity("ag").size() == 3); }
public Map<String, Object> getCompliantHostsBySeverity(String assetGroup) throws DataException { Map<String, Object> severityInfo = new HashMap<>(); List<String> nonCompliantResourceIds = getNonCompliantResourceIds(assetGroup); StringBuilder urlToQuery = new StringBuilder(esUrl).append("/").append(assetGroup).append("/vulninfo/_search"); StringBuilder requestBody = new StringBuilder( "{\"size\":0,\"query\":{\"bool\":{\"must\":[{\"match\":{\"latest\":true}},{\"terms\":{\"severitylevel.keyword\":[3,4,5]}}],\"must_not\":[{\"terms\":{\"_resourceid.keyword\":"); requestBody.append(nonCompliantResourceIds); requestBody.append("}}]}},\"aggs\":{\"severity\":{\"terms\":{\"field\":\"severitylevel.keyword\",\"size\":10}}}}"); String responseDetails = ""; try { responseDetails = PacHttpUtils.doHttpPost(urlToQuery.toString(), requestBody.toString()); } catch (Exception e) { LOGGER.error("Error in getCompliantHostsBySeverity", e); throw new DataException(e); } JsonParser jsonParser = new JsonParser(); if (StringUtils.isNotEmpty(responseDetails)) { JsonObject resultJson = (JsonObject) jsonParser.parse(responseDetails); JsonObject aggsJson = (JsonObject) jsonParser.parse(resultJson.get(AGGREGATIONS).toString()); JsonArray outerBuckets = aggsJson.getAsJsonObject("severity").getAsJsonArray(BUCKETS); if (outerBuckets.size() > 0) { for (int i = 0; i < outerBuckets.size(); i++) { severityInfo.put("S" + outerBuckets.get(i).getAsJsonObject().get("key").getAsString(), outerBuckets.get(i).getAsJsonObject().get(DOC_COUNT).getAsLong()); } } else { severityInfo.put("S3",0); severityInfo.put("S4",0); severityInfo.put("S5",0); } } return severityInfo; }
VulnerabilityRepository implements Constants { public Map<String, Object> getCompliantHostsBySeverity(String assetGroup) throws DataException { Map<String, Object> severityInfo = new HashMap<>(); List<String> nonCompliantResourceIds = getNonCompliantResourceIds(assetGroup); StringBuilder urlToQuery = new StringBuilder(esUrl).append("/").append(assetGroup).append("/vulninfo/_search"); StringBuilder requestBody = new StringBuilder( "{\"size\":0,\"query\":{\"bool\":{\"must\":[{\"match\":{\"latest\":true}},{\"terms\":{\"severitylevel.keyword\":[3,4,5]}}],\"must_not\":[{\"terms\":{\"_resourceid.keyword\":"); requestBody.append(nonCompliantResourceIds); requestBody.append("}}]}},\"aggs\":{\"severity\":{\"terms\":{\"field\":\"severitylevel.keyword\",\"size\":10}}}}"); String responseDetails = ""; try { responseDetails = PacHttpUtils.doHttpPost(urlToQuery.toString(), requestBody.toString()); } catch (Exception e) { LOGGER.error("Error in getCompliantHostsBySeverity", e); throw new DataException(e); } JsonParser jsonParser = new JsonParser(); if (StringUtils.isNotEmpty(responseDetails)) { JsonObject resultJson = (JsonObject) jsonParser.parse(responseDetails); JsonObject aggsJson = (JsonObject) jsonParser.parse(resultJson.get(AGGREGATIONS).toString()); JsonArray outerBuckets = aggsJson.getAsJsonObject("severity").getAsJsonArray(BUCKETS); if (outerBuckets.size() > 0) { for (int i = 0; i < outerBuckets.size(); i++) { severityInfo.put("S" + outerBuckets.get(i).getAsJsonObject().get("key").getAsString(), outerBuckets.get(i).getAsJsonObject().get(DOC_COUNT).getAsLong()); } } else { severityInfo.put("S3",0); severityInfo.put("S4",0); severityInfo.put("S5",0); } } return severityInfo; } }
VulnerabilityRepository implements Constants { public Map<String, Object> getCompliantHostsBySeverity(String assetGroup) throws DataException { Map<String, Object> severityInfo = new HashMap<>(); List<String> nonCompliantResourceIds = getNonCompliantResourceIds(assetGroup); StringBuilder urlToQuery = new StringBuilder(esUrl).append("/").append(assetGroup).append("/vulninfo/_search"); StringBuilder requestBody = new StringBuilder( "{\"size\":0,\"query\":{\"bool\":{\"must\":[{\"match\":{\"latest\":true}},{\"terms\":{\"severitylevel.keyword\":[3,4,5]}}],\"must_not\":[{\"terms\":{\"_resourceid.keyword\":"); requestBody.append(nonCompliantResourceIds); requestBody.append("}}]}},\"aggs\":{\"severity\":{\"terms\":{\"field\":\"severitylevel.keyword\",\"size\":10}}}}"); String responseDetails = ""; try { responseDetails = PacHttpUtils.doHttpPost(urlToQuery.toString(), requestBody.toString()); } catch (Exception e) { LOGGER.error("Error in getCompliantHostsBySeverity", e); throw new DataException(e); } JsonParser jsonParser = new JsonParser(); if (StringUtils.isNotEmpty(responseDetails)) { JsonObject resultJson = (JsonObject) jsonParser.parse(responseDetails); JsonObject aggsJson = (JsonObject) jsonParser.parse(resultJson.get(AGGREGATIONS).toString()); JsonArray outerBuckets = aggsJson.getAsJsonObject("severity").getAsJsonArray(BUCKETS); if (outerBuckets.size() > 0) { for (int i = 0; i < outerBuckets.size(); i++) { severityInfo.put("S" + outerBuckets.get(i).getAsJsonObject().get("key").getAsString(), outerBuckets.get(i).getAsJsonObject().get(DOC_COUNT).getAsLong()); } } else { severityInfo.put("S3",0); severityInfo.put("S4",0); severityInfo.put("S5",0); } } return severityInfo; }  }
VulnerabilityRepository implements Constants { public Map<String, Object> getCompliantHostsBySeverity(String assetGroup) throws DataException { Map<String, Object> severityInfo = new HashMap<>(); List<String> nonCompliantResourceIds = getNonCompliantResourceIds(assetGroup); StringBuilder urlToQuery = new StringBuilder(esUrl).append("/").append(assetGroup).append("/vulninfo/_search"); StringBuilder requestBody = new StringBuilder( "{\"size\":0,\"query\":{\"bool\":{\"must\":[{\"match\":{\"latest\":true}},{\"terms\":{\"severitylevel.keyword\":[3,4,5]}}],\"must_not\":[{\"terms\":{\"_resourceid.keyword\":"); requestBody.append(nonCompliantResourceIds); requestBody.append("}}]}},\"aggs\":{\"severity\":{\"terms\":{\"field\":\"severitylevel.keyword\",\"size\":10}}}}"); String responseDetails = ""; try { responseDetails = PacHttpUtils.doHttpPost(urlToQuery.toString(), requestBody.toString()); } catch (Exception e) { LOGGER.error("Error in getCompliantHostsBySeverity", e); throw new DataException(e); } JsonParser jsonParser = new JsonParser(); if (StringUtils.isNotEmpty(responseDetails)) { JsonObject resultJson = (JsonObject) jsonParser.parse(responseDetails); JsonObject aggsJson = (JsonObject) jsonParser.parse(resultJson.get(AGGREGATIONS).toString()); JsonArray outerBuckets = aggsJson.getAsJsonObject("severity").getAsJsonArray(BUCKETS); if (outerBuckets.size() > 0) { for (int i = 0; i < outerBuckets.size(); i++) { severityInfo.put("S" + outerBuckets.get(i).getAsJsonObject().get("key").getAsString(), outerBuckets.get(i).getAsJsonObject().get(DOC_COUNT).getAsLong()); } } else { severityInfo.put("S3",0); severityInfo.put("S4",0); severityInfo.put("S5",0); } } return severityInfo; }  List<Map<String, Object>> getAllVulnerabilities(List<String> vulnAssetsAffectedQids); List<Map<String, Object>> getAllVulnerabilitiesByAssetGroup(String assetGroup, String targetType,
			Map<String, Object> mustFilter, List<String> occurrenceFieldList, int from, int size,
			Map<String, Object> mustTermsFilter); List<Map<String, Object>> getDetailsByResourceId(String assetGroup, Map<String, Object> mustFilter,
			List<String> resourceFieldList, Map<String, Object> mustTermFilter); Map<String, Long> getAssetsAffectedCount(String assetGroup, Map<String, String> filter, String parentType); List<Map<String, Object>> getVulnerabilyAcrossAppAndEnv(String assetGroup, String filter, String application,
			String parentType, String severity); List<Map<String, Object>> getVulnerabilityTrend(String assetGroup, Map<String, String> filter, Date from,
			Date to); List<Map<String, Object>> getVulnerabilitiesDistribution(String assetGroup, String parentType); Map<String, Object> getVulnerabilitysummaryByResourceId(String resourceId); List<Map<String, Object>> getVulnerabilityDetailsByResourceId(String resourceId); @SuppressWarnings("deprecation") List<Map<String, Object>> fetchExecDirectorApps(); Map<String, Object> getUniqueHost(String assetGroup, String severity); Map<String, Object> getVulnInfo(String assetGroup, String severity); Map<String, Object> getUniqueApp(String assetGroup); List<Map<String, Object>> getAgingSummary(String assetGroup); long getTotalQualysHostCount(String index, String vulnType); Map<String, Object> getVulnerabilityByQid(String qid); Map<String, Object> getDistributionSummaryByInfraType(String assetGroup, String severitylevel,
			String parentType); Map<String, Long> getProdInfoByEnv(String assetGroup, String severitylevel); Map<String, Long> getNonProdInfoByEnv(String assetGroup, String severitylevel); List<Map<String, Object>> getDistributionSummaryByVulnType(String assetGroup, String severity); Map<String, Object> getAllQidByAG(String assetGroup, String severity); Map<String, Long> getAppsBySeverity(String assetGroup, String parentType, String severity); boolean createTrendAnnotation(TrendNote request); void createIndex(String indexName); List<Map<String, Object>> getTrendAnnotations(String ag, Date from); boolean deleteTrendAnnotation(String noteId); List<Map<String, Object>> getDataFromPacmanRDS(String query); long getRunningInstancesCount(String index, String vulnType); long getExemptedByRuleCount(String index, String vulnType); Map<String, Object> getUniqueHostBySeverity(String index, String severity); Map<String, Object> getCompliantHostsBySeverity(String assetGroup); List<String> getNonCompliantResourceIds(String index); @SuppressWarnings("deprecation") List<Map<String, Object>> fetchOrgInfoForApps(); List<Map<String, Object>> getTrendProgress(String assetGroup, String ruleId, LocalDate startDate,
			LocalDate endDate, String trendCategory); int vulnerabilityAssetsCount(String assetGroup, String targetType, Map<String, Object> mustFilter, int from,
			int size, Map<String, Object> mustTermsFilter); }
VulnerabilityRepository implements Constants { public Map<String, Object> getCompliantHostsBySeverity(String assetGroup) throws DataException { Map<String, Object> severityInfo = new HashMap<>(); List<String> nonCompliantResourceIds = getNonCompliantResourceIds(assetGroup); StringBuilder urlToQuery = new StringBuilder(esUrl).append("/").append(assetGroup).append("/vulninfo/_search"); StringBuilder requestBody = new StringBuilder( "{\"size\":0,\"query\":{\"bool\":{\"must\":[{\"match\":{\"latest\":true}},{\"terms\":{\"severitylevel.keyword\":[3,4,5]}}],\"must_not\":[{\"terms\":{\"_resourceid.keyword\":"); requestBody.append(nonCompliantResourceIds); requestBody.append("}}]}},\"aggs\":{\"severity\":{\"terms\":{\"field\":\"severitylevel.keyword\",\"size\":10}}}}"); String responseDetails = ""; try { responseDetails = PacHttpUtils.doHttpPost(urlToQuery.toString(), requestBody.toString()); } catch (Exception e) { LOGGER.error("Error in getCompliantHostsBySeverity", e); throw new DataException(e); } JsonParser jsonParser = new JsonParser(); if (StringUtils.isNotEmpty(responseDetails)) { JsonObject resultJson = (JsonObject) jsonParser.parse(responseDetails); JsonObject aggsJson = (JsonObject) jsonParser.parse(resultJson.get(AGGREGATIONS).toString()); JsonArray outerBuckets = aggsJson.getAsJsonObject("severity").getAsJsonArray(BUCKETS); if (outerBuckets.size() > 0) { for (int i = 0; i < outerBuckets.size(); i++) { severityInfo.put("S" + outerBuckets.get(i).getAsJsonObject().get("key").getAsString(), outerBuckets.get(i).getAsJsonObject().get(DOC_COUNT).getAsLong()); } } else { severityInfo.put("S3",0); severityInfo.put("S4",0); severityInfo.put("S5",0); } } return severityInfo; }  List<Map<String, Object>> getAllVulnerabilities(List<String> vulnAssetsAffectedQids); List<Map<String, Object>> getAllVulnerabilitiesByAssetGroup(String assetGroup, String targetType,
			Map<String, Object> mustFilter, List<String> occurrenceFieldList, int from, int size,
			Map<String, Object> mustTermsFilter); List<Map<String, Object>> getDetailsByResourceId(String assetGroup, Map<String, Object> mustFilter,
			List<String> resourceFieldList, Map<String, Object> mustTermFilter); Map<String, Long> getAssetsAffectedCount(String assetGroup, Map<String, String> filter, String parentType); List<Map<String, Object>> getVulnerabilyAcrossAppAndEnv(String assetGroup, String filter, String application,
			String parentType, String severity); List<Map<String, Object>> getVulnerabilityTrend(String assetGroup, Map<String, String> filter, Date from,
			Date to); List<Map<String, Object>> getVulnerabilitiesDistribution(String assetGroup, String parentType); Map<String, Object> getVulnerabilitysummaryByResourceId(String resourceId); List<Map<String, Object>> getVulnerabilityDetailsByResourceId(String resourceId); @SuppressWarnings("deprecation") List<Map<String, Object>> fetchExecDirectorApps(); Map<String, Object> getUniqueHost(String assetGroup, String severity); Map<String, Object> getVulnInfo(String assetGroup, String severity); Map<String, Object> getUniqueApp(String assetGroup); List<Map<String, Object>> getAgingSummary(String assetGroup); long getTotalQualysHostCount(String index, String vulnType); Map<String, Object> getVulnerabilityByQid(String qid); Map<String, Object> getDistributionSummaryByInfraType(String assetGroup, String severitylevel,
			String parentType); Map<String, Long> getProdInfoByEnv(String assetGroup, String severitylevel); Map<String, Long> getNonProdInfoByEnv(String assetGroup, String severitylevel); List<Map<String, Object>> getDistributionSummaryByVulnType(String assetGroup, String severity); Map<String, Object> getAllQidByAG(String assetGroup, String severity); Map<String, Long> getAppsBySeverity(String assetGroup, String parentType, String severity); boolean createTrendAnnotation(TrendNote request); void createIndex(String indexName); List<Map<String, Object>> getTrendAnnotations(String ag, Date from); boolean deleteTrendAnnotation(String noteId); List<Map<String, Object>> getDataFromPacmanRDS(String query); long getRunningInstancesCount(String index, String vulnType); long getExemptedByRuleCount(String index, String vulnType); Map<String, Object> getUniqueHostBySeverity(String index, String severity); Map<String, Object> getCompliantHostsBySeverity(String assetGroup); List<String> getNonCompliantResourceIds(String index); @SuppressWarnings("deprecation") List<Map<String, Object>> fetchOrgInfoForApps(); List<Map<String, Object>> getTrendProgress(String assetGroup, String ruleId, LocalDate startDate,
			LocalDate endDate, String trendCategory); int vulnerabilityAssetsCount(String assetGroup, String targetType, Map<String, Object> mustFilter, int from,
			int size, Map<String, Object> mustTermsFilter);  }