search

DCSO / TIE-Splunk-TA

DCSO Threat Intelligence Engine (TIE) Add-On for Splunk v8
BSD 3-Clause "New" or "Revised" License
3 stars 2 forks source link

Change first run of TIE API request to use first_seen_at #13

Open geertjanvdk opened 3 years ago

geertjanvdk commented 3 years ago

Previously, the first request to TIE was using the updated_at_since field to order data. This proved to be not so good, and also slow.

We change the first request to use first_seen_at instead.