fix: enrich empty rdp.login.success user from RDG 302 (0.5.15)

RCM 1149 often leaves Param1/Param2 empty through RD Gateway; backfill details.user from matching RDG success within 5 minutes, and still close empty-user sessions on RDG end.
2026-07-14 10:45:56 +10:00
parent d95b93992d
commit 52125a5a98
7 changed files with 252 additions and 6 deletions
@@ -128,6 +128,15 @@ def ingest_event(db: Session, payload: dict) -> tuple[Event, bool]:
        raise

    process_agent_update_ingest(db, host, payload.get("type", ""), details)
+    from app.services.rdg_workstation_session import (
+        enrich_empty_login_from_rdg_success,
+        enrich_workstation_login_user_from_rdg,
+    )
+
+    if event.host is None:
+        event.host = host
+    enrich_workstation_login_user_from_rdg(db, event)
+    enrich_empty_login_from_rdg_success(db, event)
    close_workstation_session_for_rdg_end(db, event)
    close_workstation_session_for_rdp_logoff(db, event)
    return event, True