{"action":"created","comment":{"url":"https://api.github.com/repos/airbnb/streamalert/pulls/comments/222429115","pull_request_review_id":161313622,"id":222429115,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIyMjQyOTExNQ==","diff_hunk":"@@ -0,0 +1,214 @@\n+\"\"\"\n+Copyright 2017-present, Airbnb Inc.\n+\n+Licensed under the Apache License, Version 2.0 (the \"License\");\n+you may not use this file except in compliance with the License.\n+You may obtain a copy of the License at\n+\n+   http://www.apache.org/licenses/LICENSE-2.0\n+\n+Unless required by applicable law or agreed to in writing, software\n+distributed under the License is distributed on an \"AS IS\" BASIS,\n+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n+See the License for the specific language governing permissions and\n+limitations under the License.\n+\"\"\"\n+import json\n+import logging\n+import urllib\n+import gzip\n+import os\n+import tempfile\n+import subprocess\n+import time\n+\n+import boto3\n+from botocore.exceptions import ClientError\n+import jsonlines\n+\n+from stream_alert.classifier.payload.payload_base import (\n+    PayloadRecord,\n+    RegisterInput,\n+    StreamPayload\n+)\n+from stream_alert.shared import CLASSIFIER_FUNCTION_NAME as FUNCTION_NAME\n+from stream_alert.shared.logger import get_logger\n+from stream_alert.shared.metrics import MetricLogger\n+\n+\n+LOGGER = get_logger(__name__)\n+LOGGER_DEBUG_ENABLED = LOGGER.isEnabledFor(logging.DEBUG)\n+\n+\n+class S3PayloadError(Exception):\n+    \"\"\"Exception for S3Payload errors\"\"\"\n+\n+\n+@RegisterInput\n+class S3Payload(StreamPayload):\n+    \"\"\"S3Payload class\"\"\"\n+\n+    @property\n+    def bucket(self):\n+        return self.raw_record['s3']['bucket']['name']\n+\n+    @property\n+    def key(self):\n+        return self.raw_record['s3']['object']['key']\n+\n+    @property\n+    def size(self):\n+        return int(self.raw_record['s3']['object']['size'])\n+\n+    @property\n+    def region(self):\n+        return self.raw_record['awsRegion']\n+\n+    @property\n+    def display_size(self):\n+        \"\"\"Calculate and format a size for printing\"\"\"\n+        size_kb = round(self.size / 1024.0, 2)\n+        size_mb = round(size_kb / 1024.0, 2)\n+        return '{}MB'.format(size_mb) if size_mb else '{}KB'.format(size_kb)\n+\n+    @classmethod\n+    def service(cls):\n+        return 's3'\n+\n+    @classmethod\n+    def _unquote(cls, data):\n+        # Use the urllib unquote method to decode any url encoded characters\n+        # (ie - %26 --> &) from the bucket and key names\n+        return urllib.unquote(data).decode('utf-8')\n+\n+    def _check_size(self):\n+        \"\"\"Ensure the S3 file's size is not too large to download into the Lambda environment\n+\n+        Returns:\n+            bool: True if the file is smaller than 128 MB, False otherwise\n+        \"\"\"\n+        # size == 0 or greater than 128MB\n+        if self.size == 0 or (self.size > 128 * 1024 * 1024):\n+            raise S3PayloadError('S3 object {}/{} has an invalid size and cannot be downloaded'\n+                                 'from S3: {}'.format(self.bucket, self.key, self.display_size))\n+\n+    @staticmethod\n+    def _shred_temp_directory():\n+        \"\"\"Delete all objects in the container's temp directory\"\"\"\n+        LOGGER.debug('Shredding temp directory')\n+\n+        for root, dirs, files in os.walk(tempfile.gettempdir(), topdown=False):\n+            for name in files:\n+                subprocess.check_call([  # nosec\n+                    'shred', '--force', '--iterations=1',\n+                    '--remove', os.path.join(root, name)])\n+            for name in dirs:\n+                os.rmdir(os.path.join(root, name))  # nosec\n+\n+    @staticmethod\n+    def _gz_reader(open_file):\n+        open_file.seek(0)\n+        reader = gzip.GzipFile(fileobj=open_file, mode='r')\n+        try:\n+            # Test to ensure this is gzip data, then rewind\n+            reader.read(1)\n+            reader.rewind()\n+        except IOError:\n+            # Fall back on the default reader\n+            reader = open_file\n+            reader.seek(0)\n+\n+        # Return either the gzip reader or the original reader\n+        return reader\n+\n+    @staticmethod\n+    def _jsonlines_reader(open_file):\n+        open_file.seek(0)\n+        reader = None\n+        try:\n+            json_lines = jsonlines.Reader(open_file)\n+            json_lines.read()\n+            reader = json_lines\n+        except ValueError:\n+            reader = open_file\n+\n+        open_file.seek(0)\n+        return reader\n+\n+    @classmethod\n+    def _read_downloaded_object(cls, open_file):\n+        \"\"\"Read the contents of the downloaded S3 file using the open file handle\n+\n+        Args:\n+            open_file (file-like object): File handle from which to read the data\n+\n+        Yields:\n+            tuple: line number, contents of the line being read\n+        \"\"\"\n+        reader = cls._gz_reader(open_file)\n+        try:\n+            # Try to just load the reader as regular json first\n+            yield 1, json.load(reader)\n+            return\n+        except ValueError:\n+            pass\n+\n+        # Iterate over the lines, returning each\n+        # This could be dicts from a jsonlines.Reader, or raw strings\n+        for line_num, line in enumerate(cls._jsonlines_reader(reader), start=1):\n+            yield line_num, line.strip() if isinstance(line, basestring) else line\n+\n+    def _read_file(self):\n+        \"\"\"Download and read the contents of the S3 file\n+\n+        Yields:\n+            tuple: line number, contents of the line being read\n+        \"\"\"\n+        # Shred the temp dir before downloading\n+        self._shred_temp_directory()\n+        bucket = self._unquote(self.bucket)\n+        key = self._unquote(self.key)\n+\n+        # Use tempfile.TemporaryFile to do the download\n+        # This will automatically close/get garbage collected upon completion\n+        with tempfile.TemporaryFile() as download:","path":"stream_alert/classifier/payload/s3.py","position":174,"original_position":174,"commit_id":"7fcbb469e72636c9e21b9127e3eb8491c58b27a2","original_commit_id":"f57e27d0437f0bcfdc81e0a6329418aee9cb300d","user":{"login":"ryandeivert","id":13773789,"node_id":"MDQ6VXNlcjEzNzczNzg5","avatar_url":"https://avatars3.githubusercontent.com/u/13773789?v=4","gravatar_id":"","url":"https://api.github.com/users/ryandeivert","html_url":"https://github.com/ryandeivert","followers_url":"https://api.github.com/users/ryandeivert/followers","following_url":"https://api.github.com/users/ryandeivert/following{/other_user}","gists_url":"https://api.github.com/users/ryandeivert/gists{/gist_id}","starred_url":"https://api.github.com/users/ryandeivert/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryandeivert/subscriptions","organizations_url":"https://api.github.com/users/ryandeivert/orgs","repos_url":"https://api.github.com/users/ryandeivert/repos","events_url":"https://api.github.com/users/ryandeivert/events{/privacy}","received_events_url":"https://api.github.com/users/ryandeivert/received_events","type":"User","site_admin":false},"body":"good point regarding shredding after, not before. however, I'm confused what the benefit of using `NamedTemporaryFile` would be?","created_at":"2018-10-03T18:59:44Z","updated_at":"2018-10-03T18:59:44Z","html_url":"https://github.com/airbnb/streamalert/pull/821#discussion_r222429115","pull_request_url":"https://api.github.com/repos/airbnb/streamalert/pulls/821","author_association":"CONTRIBUTOR","_links":{"self":{"href":"https://api.github.com/repos/airbnb/streamalert/pulls/comments/222429115"},"html":{"href":"https://github.com/airbnb/streamalert/pull/821#discussion_r222429115"},"pull_request":{"href":"https://api.github.com/repos/airbnb/streamalert/pulls/821"}},"in_reply_to_id":221840336},"pull_request":{"url":"https://api.github.com/repos/airbnb/streamalert/pulls/821","id":219134568,"node_id":"MDExOlB1bGxSZXF1ZXN0MjE5MTM0NTY4","html_url":"https://github.com/airbnb/streamalert/pull/821","diff_url":"https://github.com/airbnb/streamalert/pull/821.diff","patch_url":"https://github.com/airbnb/streamalert/pull/821.patch","issue_url":"https://api.github.com/repos/airbnb/streamalert/issues/821","number":821,"state":"open","locked":false,"title":"function split part 1, migration and refactor of payload and parsers","user":{"login":"ryandeivert","id":13773789,"node_id":"MDQ6VXNlcjEzNzczNzg5","avatar_url":"https://avatars3.githubusercontent.com/u/13773789?v=4","gravatar_id":"","url":"https://api.github.com/users/ryandeivert","html_url":"https://github.com/ryandeivert","followers_url":"https://api.github.com/users/ryandeivert/followers","following_url":"https://api.github.com/users/ryandeivert/following{/other_user}","gists_url":"https://api.github.com/users/ryandeivert/gists{/gist_id}","starred_url":"https://api.github.com/users/ryandeivert/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryandeivert/subscriptions","organizations_url":"https://api.github.com/users/ryandeivert/orgs","repos_url":"https://api.github.com/users/ryandeivert/repos","events_url":"https://api.github.com/users/ryandeivert/events{/privacy}","received_events_url":"https://api.github.com/users/ryandeivert/received_events","type":"User","site_admin":false},"body":"to: @chunyong-lin , @strcrzy \r\ncc: @airbnb/streamalert-maintainers\r\nresolves: #122 \r\nresolves: #353\r\n\r\n## Notes for reviewers\r\n\r\nI apologize in advance that this is so large. This will be merged into an ongoing work-in-progress feature branch before merging into master. This PR alone is not a feature-complete migration, and will be followed by more PRs. Only certain components have been migrated thus far, including the payload classes and parser classes.\r\n\r\n## What this is _not_\r\n\r\nThis does not include some of the core components that are coming in the next PR(s):\r\n* The actual classification engine\r\n* Normalization logic\r\n* The Firehose client for sending log data to S3\r\n* Any logic for the bridge between this (classifier) function and the rules (rules engine) function\r\n* The actual lambda entry point/handler to make it all work in Lambda\r\n\r\n## Background\r\n\r\nIn the near future, StreamAlert's rule process will be split into 2 functions - one for classification and one for rule processing. This is the start of that migration.\r\n\r\n## Changes\r\n\r\n* Slight refactor to the `StreamPayload` class to better support loading of data from incoming records. This class now encapsulates all logic, instead of the logic being in multiple disparate places/tied to the 'classifier'.\r\n* Updates to the `S3Payload` class\r\n  * Adding support for various types of input. Now, any combination of the following will work:\r\n    * Newline-delimited json data (one json object per line)\r\n    * Formatted json data (not newline-delimited)\r\n    * Lines of raw data (non-json, aka csv)\r\n    * Gzipped data (of all above types)\r\n    * Non-gzipped data (of all above types)\r\n  * The above change now uses `jsonlines` to iterate over lines in newline-delimited json data. This is faster/more memory efficient then the alternative `ndjson` package, which loads the entire list of lines into memory and _then_ iterates over them. `jsonlines` does this upon read, so will use as little memory possible.\r\n  * Utilizing `tempfile.TemporaryFile` to handle reading/garbage collection better.\r\n* Complete overhaul of the `ParserBase` class to be far more clear and concise.\r\n  * This change includes updates to support never missing unparsed data. Prior to this, [data could be deleted](https://github.com/airbnb/streamalert/blob/master/stream_alert/rule_processor/parsers.py#L219-L226) during parsing and we would never actually know if this occurred.\r\n  * The parser will now track what records have successfully parsed with a given schema, along with ones that have failed.\r\n  * No successful parses with a schema now means a complete failure, which will skip to trying the next schema.\r\n* Removing usage of the `jsonpath_rw` library in parsing, since it is very slow. Replacing it with the simpler/faster `jmespath` library.\r\n* Updates to requirements.txt and various other fixes.\r\n* Fixes to various other bugs discovered during the rewrite.\r\n\r\n\r\n## Testing\r\n\r\n* Completely re-wrote unit tests for comprehensive coverage.\r\n","created_at":"2018-09-29T08:28:16Z","updated_at":"2018-10-03T18:59:44Z","closed_at":null,"merged_at":null,"merge_commit_sha":"0b2adee617f7a22d9d5f763871bd0f89702d3c12","assignee":null,"assignees":[],"requested_reviewers":[{"login":"chunyong-lin","id":21151436,"node_id":"MDQ6VXNlcjIxMTUxNDM2","avatar_url":"https://avatars1.githubusercontent.com/u/21151436?v=4","gravatar_id":"","url":"https://api.github.com/users/chunyong-lin","html_url":"https://github.com/chunyong-lin","followers_url":"https://api.github.com/users/chunyong-lin/followers","following_url":"https://api.github.com/users/chunyong-lin/following{/other_user}","gists_url":"https://api.github.com/users/chunyong-lin/gists{/gist_id}","starred_url":"https://api.github.com/users/chunyong-lin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chunyong-lin/subscriptions","organizations_url":"https://api.github.com/users/chunyong-lin/orgs","repos_url":"https://api.github.com/users/chunyong-lin/repos","events_url":"https://api.github.com/users/chunyong-lin/events{/privacy}","received_events_url":"https://api.github.com/users/chunyong-lin/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[{"id":528833485,"node_id":"MDU6TGFiZWw1Mjg4MzM0ODU=","url":"https://api.github.com/repos/airbnb/streamalert/labels/improvement","name":"improvement","color":"5319e7","default":false},{"id":539574195,"node_id":"MDU6TGFiZWw1Mzk1NzQxOTU=","url":"https://api.github.com/repos/airbnb/streamalert/labels/log%20parsers","name":"log parsers","color":"006b75","default":false},{"id":1073398671,"node_id":"MDU6TGFiZWwxMDczMzk4Njcx","url":"https://api.github.com/repos/airbnb/streamalert/labels/xlarge","name":"xlarge","color":"b60205","default":false}],"milestone":{"url":"https://api.github.com/repos/airbnb/streamalert/milestones/9","html_url":"https://github.com/airbnb/streamalert/milestone/9","labels_url":"https://api.github.com/repos/airbnb/streamalert/milestones/9/labels","id":3698097,"node_id":"MDk6TWlsZXN0b25lMzY5ODA5Nw==","number":9,"title":"2.1.0","description":"","creator":{"login":"ryandeivert","id":13773789,"node_id":"MDQ6VXNlcjEzNzczNzg5","avatar_url":"https://avatars3.githubusercontent.com/u/13773789?v=4","gravatar_id":"","url":"https://api.github.com/users/ryandeivert","html_url":"https://github.com/ryandeivert","followers_url":"https://api.github.com/users/ryandeivert/followers","following_url":"https://api.github.com/users/ryandeivert/following{/other_user}","gists_url":"https://api.github.com/users/ryandeivert/gists{/gist_id}","starred_url":"https://api.github.com/users/ryandeivert/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryandeivert/subscriptions","organizations_url":"https://api.github.com/users/ryandeivert/orgs","repos_url":"https://api.github.com/users/ryandeivert/repos","events_url":"https://api.github.com/users/ryandeivert/events{/privacy}","received_events_url":"https://api.github.com/users/ryandeivert/received_events","type":"User","site_admin":false},"open_issues":3,"closed_issues":0,"state":"open","created_at":"2018-09-29T08:07:16Z","updated_at":"2018-10-03T07:06:57Z","due_on":null,"closed_at":null},"commits_url":"https://api.github.com/repos/airbnb/streamalert/pulls/821/commits","review_comments_url":"https://api.github.com/repos/airbnb/streamalert/pulls/821/comments","review_comment_url":"https://api.github.com/repos/airbnb/streamalert/pulls/comments{/number}","comments_url":"https://api.github.com/repos/airbnb/streamalert/issues/821/comments","statuses_url":"https://api.github.com/repos/airbnb/streamalert/statuses/7fcbb469e72636c9e21b9127e3eb8491c58b27a2","head":{"label":"airbnb:ryandeivert-func-split-pt-1","ref":"ryandeivert-func-split-pt-1","sha":"7fcbb469e72636c9e21b9127e3eb8491c58b27a2","user":{"login":"airbnb","id":698437,"node_id":"MDEyOk9yZ2FuaXphdGlvbjY5ODQzNw==","avatar_url":"https://avatars3.githubusercontent.com/u/698437?v=4","gravatar_id":"","url":"https://api.github.com/users/airbnb","html_url":"https://github.com/airbnb","followers_url":"https://api.github.com/users/airbnb/followers","following_url":"https://api.github.com/users/airbnb/following{/other_user}","gists_url":"https://api.github.com/users/airbnb/gists{/gist_id}","starred_url":"https://api.github.com/users/airbnb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/airbnb/subscriptions","organizations_url":"https://api.github.com/users/airbnb/orgs","repos_url":"https://api.github.com/users/airbnb/repos","events_url":"https://api.github.com/users/airbnb/events{/privacy}","received_events_url":"https://api.github.com/users/airbnb/received_events","type":"Organization","site_admin":false},"repo":{"id":79683936,"node_id":"MDEwOlJlcG9zaXRvcnk3OTY4MzkzNg==","name":"streamalert","full_name":"airbnb/streamalert","private":false,"owner":{"login":"airbnb","id":698437,"node_id":"MDEyOk9yZ2FuaXphdGlvbjY5ODQzNw==","avatar_url":"https://avatars3.githubusercontent.com/u/698437?v=4","gravatar_id":"","url":"https://api.github.com/users/airbnb","html_url":"https://github.com/airbnb","followers_url":"https://api.github.com/users/airbnb/followers","following_url":"https://api.github.com/users/airbnb/following{/other_user}","gists_url":"https://api.github.com/users/airbnb/gists{/gist_id}","starred_url":"https://api.github.com/users/airbnb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/airbnb/subscriptions","organizations_url":"https://api.github.com/users/airbnb/orgs","repos_url":"https://api.github.com/users/airbnb/repos","events_url":"https://api.github.com/users/airbnb/events{/privacy}","received_events_url":"https://api.github.com/users/airbnb/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/airbnb/streamalert","description":"StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.","fork":false,"url":"https://api.github.com/repos/airbnb/streamalert","forks_url":"https://api.github.com/repos/airbnb/streamalert/forks","keys_url":"https://api.github.com/repos/airbnb/streamalert/keys{/key_id}","collaborators_url":"https://api.github.com/repos/airbnb/streamalert/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/airbnb/streamalert/teams","hooks_url":"https://api.github.com/repos/airbnb/streamalert/hooks","issue_events_url":"https://api.github.com/repos/airbnb/streamalert/issues/events{/number}","events_url":"https://api.github.com/repos/airbnb/streamalert/events","assignees_url":"https://api.github.com/repos/airbnb/streamalert/assignees{/user}","branches_url":"https://api.github.com/repos/airbnb/streamalert/branches{/branch}","tags_url":"https://api.github.com/repos/airbnb/streamalert/tags","blobs_url":"https://api.github.com/repos/airbnb/streamalert/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/airbnb/streamalert/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/airbnb/streamalert/git/refs{/sha}","trees_url":"https://api.github.com/repos/airbnb/streamalert/git/trees{/sha}","statuses_url":"https://api.github.com/repos/airbnb/streamalert/statuses/{sha}","languages_url":"https://api.github.com/repos/airbnb/streamalert/languages","stargazers_url":"https://api.github.com/repos/airbnb/streamalert/stargazers","contributors_url":"https://api.github.com/repos/airbnb/streamalert/contributors","subscribers_url":"https://api.github.com/repos/airbnb/streamalert/subscribers","subscription_url":"https://api.github.com/repos/airbnb/streamalert/subscription","commits_url":"https://api.github.com/repos/airbnb/streamalert/commits{/sha}","git_commits_url":"https://api.github.com/repos/airbnb/streamalert/git/commits{/sha}","comments_url":"https://api.github.com/repos/airbnb/streamalert/comments{/number}","issue_comment_url":"https://api.github.com/repos/airbnb/streamalert/issues/comments{/number}","contents_url":"https://api.github.com/repos/airbnb/streamalert/contents/{+path}","compare_url":"https://api.github.com/repos/airbnb/streamalert/compare/{base}...{head}","merges_url":"https://api.github.com/repos/airbnb/streamalert/merges","archive_url":"https://api.github.com/repos/airbnb/streamalert/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/airbnb/streamalert/downloads","issues_url":"https://api.github.com/repos/airbnb/streamalert/issues{/number}","pulls_url":"https://api.github.com/repos/airbnb/streamalert/pulls{/number}","milestones_url":"https://api.github.com/repos/airbnb/streamalert/milestones{/number}","notifications_url":"https://api.github.com/repos/airbnb/streamalert/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/airbnb/streamalert/labels{/name}","releases_url":"https://api.github.com/repos/airbnb/streamalert/releases{/id}","deployments_url":"https://api.github.com/repos/airbnb/streamalert/deployments","created_at":"2017-01-22T01:10:56Z","updated_at":"2018-10-03T18:12:40Z","pushed_at":"2018-10-03T18:22:41Z","git_url":"git://github.com/airbnb/streamalert.git","ssh_url":"git@github.com:airbnb/streamalert.git","clone_url":"https://github.com/airbnb/streamalert.git","svn_url":"https://github.com/airbnb/streamalert","homepage":"","size":16328,"stargazers_count":1489,"watchers_count":1489,"language":"Python","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":158,"mirror_url":null,"archived":false,"open_issues_count":61,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":158,"open_issues":61,"watchers":1489,"default_branch":"master"}},"base":{"label":"airbnb:ryandeivert-function-split","ref":"ryandeivert-function-split","sha":"557fb3f604661cdd9bd36486cccc8ce3a34bd1f1","user":{"login":"airbnb","id":698437,"node_id":"MDEyOk9yZ2FuaXphdGlvbjY5ODQzNw==","avatar_url":"https://avatars3.githubusercontent.com/u/698437?v=4","gravatar_id":"","url":"https://api.github.com/users/airbnb","html_url":"https://github.com/airbnb","followers_url":"https://api.github.com/users/airbnb/followers","following_url":"https://api.github.com/users/airbnb/following{/other_user}","gists_url":"https://api.github.com/users/airbnb/gists{/gist_id}","starred_url":"https://api.github.com/users/airbnb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/airbnb/subscriptions","organizations_url":"https://api.github.com/users/airbnb/orgs","repos_url":"https://api.github.com/users/airbnb/repos","events_url":"https://api.github.com/users/airbnb/events{/privacy}","received_events_url":"https://api.github.com/users/airbnb/received_events","type":"Organization","site_admin":false},"repo":{"id":79683936,"node_id":"MDEwOlJlcG9zaXRvcnk3OTY4MzkzNg==","name":"streamalert","full_name":"airbnb/streamalert","private":false,"owner":{"login":"airbnb","id":698437,"node_id":"MDEyOk9yZ2FuaXphdGlvbjY5ODQzNw==","avatar_url":"https://avatars3.githubusercontent.com/u/698437?v=4","gravatar_id":"","url":"https://api.github.com/users/airbnb","html_url":"https://github.com/airbnb","followers_url":"https://api.github.com/users/airbnb/followers","following_url":"https://api.github.com/users/airbnb/following{/other_user}","gists_url":"https://api.github.com/users/airbnb/gists{/gist_id}","starred_url":"https://api.github.com/users/airbnb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/airbnb/subscriptions","organizations_url":"https://api.github.com/users/airbnb/orgs","repos_url":"https://api.github.com/users/airbnb/repos","events_url":"https://api.github.com/users/airbnb/events{/privacy}","received_events_url":"https://api.github.com/users/airbnb/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/airbnb/streamalert","description":"StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.","fork":false,"url":"https://api.github.com/repos/airbnb/streamalert","forks_url":"https://api.github.com/repos/airbnb/streamalert/forks","keys_url":"https://api.github.com/repos/airbnb/streamalert/keys{/key_id}","collaborators_url":"https://api.github.com/repos/airbnb/streamalert/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/airbnb/streamalert/teams","hooks_url":"https://api.github.com/repos/airbnb/streamalert/hooks","issue_events_url":"https://api.github.com/repos/airbnb/streamalert/issues/events{/number}","events_url":"https://api.github.com/repos/airbnb/streamalert/events","assignees_url":"https://api.github.com/repos/airbnb/streamalert/assignees{/user}","branches_url":"https://api.github.com/repos/airbnb/streamalert/branches{/branch}","tags_url":"https://api.github.com/repos/airbnb/streamalert/tags","blobs_url":"https://api.github.com/repos/airbnb/streamalert/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/airbnb/streamalert/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/airbnb/streamalert/git/refs{/sha}","trees_url":"https://api.github.com/repos/airbnb/streamalert/git/trees{/sha}","statuses_url":"https://api.github.com/repos/airbnb/streamalert/statuses/{sha}","languages_url":"https://api.github.com/repos/airbnb/streamalert/languages","stargazers_url":"https://api.github.com/repos/airbnb/streamalert/stargazers","contributors_url":"https://api.github.com/repos/airbnb/streamalert/contributors","subscribers_url":"https://api.github.com/repos/airbnb/streamalert/subscribers","subscription_url":"https://api.github.com/repos/airbnb/streamalert/subscription","commits_url":"https://api.github.com/repos/airbnb/streamalert/commits{/sha}","git_commits_url":"https://api.github.com/repos/airbnb/streamalert/git/commits{/sha}","comments_url":"https://api.github.com/repos/airbnb/streamalert/comments{/number}","issue_comment_url":"https://api.github.com/repos/airbnb/streamalert/issues/comments{/number}","contents_url":"https://api.github.com/repos/airbnb/streamalert/contents/{+path}","compare_url":"https://api.github.com/repos/airbnb/streamalert/compare/{base}...{head}","merges_url":"https://api.github.com/repos/airbnb/streamalert/merges","archive_url":"https://api.github.com/repos/airbnb/streamalert/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/airbnb/streamalert/downloads","issues_url":"https://api.github.com/repos/airbnb/streamalert/issues{/number}","pulls_url":"https://api.github.com/repos/airbnb/streamalert/pulls{/number}","milestones_url":"https://api.github.com/repos/airbnb/streamalert/milestones{/number}","notifications_url":"https://api.github.com/repos/airbnb/streamalert/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/airbnb/streamalert/labels{/name}","releases_url":"https://api.github.com/repos/airbnb/streamalert/releases{/id}","deployments_url":"https://api.github.com/repos/airbnb/streamalert/deployments","created_at":"2017-01-22T01:10:56Z","updated_at":"2018-10-03T18:12:40Z","pushed_at":"2018-10-03T18:22:41Z","git_url":"git://github.com/airbnb/streamalert.git","ssh_url":"git@github.com:airbnb/streamalert.git","clone_url":"https://github.com/airbnb/streamalert.git","svn_url":"https://github.com/airbnb/streamalert","homepage":"","size":16328,"stargazers_count":1489,"watchers_count":1489,"language":"Python","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":158,"mirror_url":null,"archived":false,"open_issues_count":61,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":158,"open_issues":61,"watchers":1489,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/airbnb/streamalert/pulls/821"},"html":{"href":"https://github.com/airbnb/streamalert/pull/821"},"issue":{"href":"https://api.github.com/repos/airbnb/streamalert/issues/821"},"comments":{"href":"https://api.github.com/repos/airbnb/streamalert/issues/821/comments"},"review_comments":{"href":"https://api.github.com/repos/airbnb/streamalert/pulls/821/comments"},"review_comment":{"href":"https://api.github.com/repos/airbnb/streamalert/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/airbnb/streamalert/pulls/821/commits"},"statuses":{"href":"https://api.github.com/repos/airbnb/streamalert/statuses/7fcbb469e72636c9e21b9127e3eb8491c58b27a2"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"ryandeivert"}}