bawood / TA-DUOSecurity2FA

Splunk TA for indexing DUO 2 factor activity logs
2 stars 4 forks source link

Support for Updated Duo Client Python #5

Open SIM-isec opened 5 years ago

SIM-isec commented 5 years ago

It looks like Duo released an update for their duo_client python library: https://github.com/duosecurity/duo_client_python

They added support for pagination: https://github.com/duosecurity/duo_client_python/commits/master

DUO had sent us a message informing us that they are removing support for unpaginated API calls in March.

SIM-isec commented 5 years ago

More details: https://help.duo.com/s/article/4744

bawood commented 5 years ago

Thanks for the info. Reading through the duo article it seems like my modular input code shouldn't be affected by this change, it is already using pagination with the log API. The exception to that is the summary API, but I don't see that in their list of APIs that will start requiring it (which makes sense because it's a single json object). I'll still probably look at upgrading the duo client, since the one I include is fairly old.