deductiv / kvstore_tools

KV Store Tools Redux app for Splunk
https://www.deductiv.net
Other
3 stars 6 forks source link

alert_kvstore.py issue on newline #7

Open SimonSmeets opened 1 year ago

SimonSmeets commented 1 year ago

The alert action "save to kvstore" does not work when a mv field that is used contains newline characters. This can be easily fixed by changing one line in the code:

matches = re.match(r'\$(.+)\$', val) to: matches = re.match(r'\$(.+)\$', val, re.S)

Might be nice to include in the next release.

jrzmurray commented 1 year ago

Fixed in version 2.0.9 #8