From 9087768b1d0f249ddbe588026da5f2deda5878c4 Mon Sep 17 00:00:00 2001
From: ANSSI-BSO-D <bso-d@ssi.gouv.fr>
Date: Wed, 21 Feb 2018 15:12:26 +0100
Subject: [PATCH] add search on sighting

added the possibility to search sightings :
Here some example :
```python
print(misp.sighting_list(424242))
```
The answer will give a sighting list corresponding to the attribute 424242.
```python
print(misp.sighting_list(element_id=42, org_id=2, scope=event))
```
The return will be a sighting list of event 42 with a filter for organisation 2.
---
 pymisp/api.py | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/pymisp/api.py b/pymisp/api.py
index 437a4c5..7e61262 100644
--- a/pymisp/api.py
+++ b/pymisp/api.py
@@ -1344,6 +1344,40 @@ class PyMISP(object):
         s = MISPSighting()
         s.from_dict(value=value, uuid=uuid, id=id, source=source, type=type, timestamp=timestamp, **kwargs)
         return self.set_sightings(s)
+    
+    def sighting_list(self, element_id, scope="attribute", org_id=False):
+        """Get the list of sighting.
+        :param element_id: could be an event id or attribute id
+        :type element_id: int
+        :param scope: could be attribute or event
+        :return: A json list of sighting corresponding to the search
+        :rtype: list
+        
+        :Example:
+ 
+        >>> misp.sighting_list(4731) # default search on attribute
+        [ ... ]
+        >>> misp.sighting_list(42, event) # return list of sighting for event 42
+        [ ... ]
+        >>> misp.sighting_list(element_id=42, org_id=2, scope=event) # return list of sighting for event 42 filtered with org id 2
+        """
+        if isinstance(element_id, int) is False:
+            raise Exception('Invalid parameter, element_id must be a number')
+        if scope not in ["attribute", "event"]:
+            raise Exception('scope parameter must be "attribute" or "event"')
+        if org_id is not False:
+            if isinstance(org_id, int) is False:
+                raise Exception('Invalid parameter, org_id must be a number')
+        else:
+            org_id = ""
+        uri = 'sightings/listSightings/{}/{}/{}'.format(
+            element_id,
+            scope,
+            org_id
+            )
+        url = urljoin(self.root_url, uri)
+        response = self.__prepare_request('POST', url)
+        return self._check_response(response)
 
     # ############## Sharing Groups ##################