splunk-ta 1.0.36 - Githubissues

jeremy-cxf commented 11 months ago

Makes datetime objects aware (e.g datetime.utcnow => datetime.now(timezone.utc))
Fixes checkpoint save in requests input if the returned results are 0.
Fixes a bug where if the last saved until_time was over 24 hours ago, it now resets the from_time timestamp to exactly 24 hours to meet API requirements.
Fixed a bug where the input module could lag permanently behind in the event the last until time was hours old, causing the until_time to only be the interval difference (5mins) from that time in the past repeatedly. The new behavior in this scenario just sets the until_time to the current time (with or without offset) in order to catch up on events.
Fixes duplicate log_info statements that causes spamming of raw events to the internal index.

Note the 294ad5bbdf92407b9a6785b46106152a in the metadata is just representative of the token format, and not my actual token.

jeremy-cxf commented 11 months ago

Addign @brectanus-sigsci and @Ayelet-Fastly to review (Optional, but they were already familiar with changes).

jeremy-cxf commented 10 months ago

@brectanus-sigsci review changes have been committed :) Please re:review.

fastly / sigsci-splunk-app