Update api.py

Patch to handle dead subscriptions
wagov · Mar 30, 2023 · 0a5a1c8 · 0a5a1c8
1 parent 1004d70
commit 0a5a1c8
Showing 1 changed file with 16 additions and 12 deletions.
diff --git a/siem_query_utils/api.py b/siem_query_utils/api.py
@@ -200,18 +200,22 @@ def workspace_details():
     for wsdata in list_workspaces("json"):
         customerId = wsdata["customerId"]
         sub = wsdata["subscription"]
-        ws = azcli(
-            [
-                "monitor",
-                "log-analytics",
-                "workspace",
-                "list",
-                "--subscription",
-                sub,
-                "--query",
-                f"[?customerId == '{customerId}']",
-            ]
-        )[0]
+        try: # handle dead/missing subscriptions
+            ws = azcli(
+                [
+                    "monitor",
+                    "log-analytics",
+                    "workspace",
+                    "list",
+                    "--subscription",
+                    sub,
+                    "--query",
+                    f"[?customerId == '{customerId}']",
+                ]
+            )[0]
+        except Exception as exc:
+            logger.warning(exc)
+            continue
         ws["id"] = ws["id"].lower()
         ws["name"] = ws["name"].lower()
         ws["ingest_function"] = f"{ws['customerId'].replace('-', '_')}_incoming"