feat(addon): Health Check Dashboard

PR: #295 

Add health dashboard to add-on for self checking issues.

Author: paulmnguyen

.github/workflows/pr-appinspect.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   appinspect-addon:
     name: AppInspect (Add-on)
-    runs-on: ubuntu-20.04 
+    runs-on: ubuntu-20.04
     # Remove write permissions
     permissions:
       contents: read

Splunk_TA_paloalto/bin/input_module_cortex_xdr.py

@@ -70,14 +70,19 @@ def fetch_xdr_incidents(helper, client, mod_time):
             "value": mod_time,
         }
     )
+    try:
+        incidents = client.get_incidents(
+                limit=50,
+                sort_field="modification_time",
+                sort_order="asc",
+                filters=filters,
+            )
+        helper.log_info("Message: XDR API Returned Successfully")
+        return incidents
+    except Exception as e:
+        message = "Message: %s"%e
+        helper.log_error(message)
 
-    incidents = client.get_incidents(
-        limit=50,
-        sort_field="modification_time",
-        sort_order="asc",
-        filters=filters,
-    )
-    return incidents
 
 def fetch_incident_details(helper, client, incident):
     try:
@@ -120,7 +125,7 @@ def handle_incidents(helper, ew, incidents, get_details, base_url):
                 sourcetype='pan:xdr_incident',
                 data=json.dumps(incident))
             ew.write_event(event)
-    helper.log_debug(f"Got {len(incidents)} results")
+    helper.log_info(f"Got {len(incidents)} results")
     helper.log_debug(
         "Got the following incident IDs: "
         + " ".join([str(y) for y in incidents])
@@ -178,5 +183,5 @@ def collect_events(helper, ew):
     if incidents:
         handle_incidents(helper, ew, incidents, get_details, base_url)
     else:
-        helper.log_debug("No Incidents")
+        helper.log_info("No Incidents")
 

Splunk_TA_paloalto/default/data/ui/nav/default.xml

@@ -1,5 +1,6 @@
 <nav search_view="search" color="#FFFFFF">
   <view name="inputs" default="true" />
   <view name="configuration"/>
+  <view name="health"/>
   <view name="search" label="Search"/>
 </nav>