(feature+fix) Add source to suricata ingestor. Correct endpoint for gcp mirroring (metlo-labs#62)

Author: AHarmlessPyro

backend/src/suricata_setup/gcp-services/gcp_setup.ts

@@ -840,8 +840,7 @@ export async function push_files({
   id,
   instance_url,
   ...rest
-}: RESPONSE["data"]): Promise<RESPONSE> {
-  const endpoint = "api/v1/log-request/single"
+}: RESPONSE["data"]): Promise<RESPONSE> {  
   const instance_name = instance_url.split("/").at(-1)
   let [key, raw] = createApiKey(`Metlo-collector-${id}`)
   key.for = API_KEY_TYPE.GCP
@@ -863,7 +862,7 @@ export async function push_files({
 
     put_data_file(
       format(filepath_ingestor_in, [
-        `${process.env.BACKEND_URL}/${endpoint}`,
+        `${process.env.BACKEND_URL}`,
         raw,
       ]),
       filepath_ingestor_out,

ingestors/suricata/interface.ts

@@ -119,6 +119,7 @@ export interface RESPONSE {
     sourcePort: number
     destination: string
     destinationPort: number
+    metloSource: string,
   }
 }
 

ingestors/suricata/utils.ts

@@ -89,6 +89,7 @@ export function prepareResponse(
       sourcePort: alert.src_port,
       destination: alert.dest_ip,
       destinationPort: alert.dest_port,
+      metloSource: "suricata"
     },
   }
   return resp