Built-In: SDN Node

Overview

The NL Find SDN Assets node provides the ability to locate Software Defined Networking (SDN) Assets from a Source in the incoming message.

Functionality

The SDN node exposes the following functionality:

Locate Software Defined Networking (SDN) Assets via the NL Find SDN Assets node.

Flow Node

Utility Node for locating potential Software Defined Networking (SDN) Assets from a Source in the incoming message and splitting the SDNs found into individual messages with the Output Field set to the current SDN element sent out the appropriate output. This node is useful for operating on CIDR blocks, IP addresses, and IP Ranges. This works for both IPv4 and IPv6. When a message arrives, this node will process each individual element in the Source buffer. Each element initiates a new message sent on this node's output matching the type of SDN matched. Each output message is part of the same message associated with an incident, but is processed separately. The source may be an array of elements or a string buffer. For assets to be located, they must be surrounded by white space characters (spaces, tabs, new lines, etc...).

Property

Description

Name

The display name of the node within the flows.

Source

If the Source element does not exist or is an empty array, the message is filtered out with an error logged in the message audits.

Output Field

The default Output Field is sdn.

Learn More

JSON Message Format

Success

The italicized, green text is retrieved by the NL Find SDN Assets node. In this example, the node was configured to search msg.payload.buffer for SDN assets. It finds four SDN assets, resulting in a message for each asset coming from the corresponding output.

CIDR output:

"payload": {
    "buffer": "12.3.4.5/24 10.20.30.40-20.30.40.50 fe80::1/64 ip: 2.1.1.1",
    "sdn": {
      "cidr": "12.3.4.5/24"
    }
  }
}

IP Address Range output:

"{
  "payload": {
    "buffer": "12.3.4.5/24 10.20.30.40-20.30.40.50 fe80::1/64 ip: 2.1.1.1",
    "sdn": {
      "ipRange": "10.20.30.40-20.30.40.50"
    }
  }
}

CIDR output:

"payload": {
    "buffer": "12.3.4.5/24 10.20.30.40-20.30.40.50 fe80::1/64 ip: 2.1.1.1",
    "sdn": {
      "cidr": "fe80::1/64"
    }
  }
}

IP Address output:

"{
  "payload": {
    "buffer": "12.3.4.5/24 10.20.30.40-20.30.40.50 fe80::1/64 ip: 2.1.1.1",
    "sdn": {
      "ip": "2.1.1.1"
    }
  }
}

Nevelex Labs, Main Office

Metro Office Park
2950 Metro Drive, Suite 104
Bloomington, MN 55425
Phone: +1 952-500-8921

Contact Us

EULA