Topic
  • 2 replies
  • Latest Post - ‏2016-07-07T16:56:39Z by RobMcGinley
Waseem.Farooqui
Waseem.Farooqui
3 Posts

Pinned topic Best Practice for polling data.

‏2016-04-19T12:04:29Z | polling qradar/siem referenceset

Hi,

I want to know the best practices used by the QRadar developers community to run the process in background.

Like QRadar provides the SDK for building the apps which is in Python and used Flask Web application framework now I want to create an app that poll the data from the server and update the QRadar Reference sets.

I come to know there are 3 options.

  1. Threads
  2. flask-celery
  3. Crontab
  • Waseem.Farooqui
    Waseem.Farooqui
    3 Posts

    Re: Best Practice for polling data.

    ‏2016-07-01T10:30:59Z  

    I have implement python thread but in case of multi-threading new thread always run under the context of main process, If I close the app the polling thread will be destroyed. 

    What should I do in this case ?

  • RobMcGinley
    RobMcGinley
    1 Post

    Re: Best Practice for polling data.

    ‏2016-07-07T16:56:39Z  

    I have implement python thread but in case of multi-threading new thread always run under the context of main process, If I close the app the polling thread will be destroyed. 

    What should I do in this case ?

    It depends on your applications purpose but for regular, timed polling of the QRadar API I would either run the Python script as a daemon so the main process never exits or run the script at a timed interval using cron.