search

splunk / splunk-aws-project-trumpet

MIT License
95 stars 31 forks source link

python [ERROR] KeyError: 'instanceDetails' using splunk_cwe_firehose_GD_detective_processor_v0.2.zip #51

Open ErikOAWS opened 2 years ago

ErikOAWS commented 2 years ago

Using splunk_cwe_firehose_GD_detective_processor_v0.2.zip on Firehose for GuardDuty events, and getting the following error/output from the processor:

START RequestId: 976ce661-4cf7-48ac-a4e1-99f8a31eb1df Version: $LATEST
[ERROR] KeyError: 'instanceDetails'
Traceback (most recent call last):
  File "/var/task/lambda_function.py", line 287, in handler
    records = list(processRecords(event['records']))
  File "/var/task/lambda_function.py", line 131, in processRecords
    if "networkInterfaces" in data['detail']['resource']['instanceDetails']:
END RequestId: 976ce661-4cf7-48ac-a4e1-99f8a31eb1df
REPORT RequestId: 976ce661-4cf7-48ac-a4e1-99f8a31eb1df  
Duration: 5.30 ms   Billed Duration: 6 ms   Memory Size: 512 MB 
Max Memory Used: 59 MB