in elkserver/docker/redelk-base/redelkinstalldata/scripts/modules/enrich_csbeacon/module.py [0:0]
def copy_data_fields(self, src, dst, fields):
"""Copy all data of [fields] from src to dst document and save it to ES"""
for field in fields:
if field in dst["_source"]:
self.logger.info(
"Field [%s] already exists in destination document, it will be overwritten",
field,
)
dst["_source"][field] = src["_source"][field]
try:
es.update(index=dst["_index"], id=dst["_id"], body={"doc": dst["_source"]})
return dst
# pylint: disable=broad-except
except Exception as error:
# stackTrace = traceback.format_exc()
self.logger.error(
"Error enriching beacon document %s: %s", dst["_id"], traceback
)
self.logger.exception(error)
return False