search

google / timesketch

Collaborative forensic timeline analysis
Apache License 2.0
2.58k stars 589 forks source link

[API Client] Update search module to support millisecond dates #2869

Closed sydp closed 1 year ago

sydp commented 1 year ago

Describe the bug The new UI now allows date chips with millisecond precision. The API client needs to be updated to support these values.

To Reproduce Steps to reproduce the behavior:

  1. Go to a sketch
  2. Create a saved search with sub-second precision
  3. Save the search
  4. Use the timesketch CLI as follows timesketch --sketch <sketch_id> saved-searches describe <saved-search-id>. This will raise a ValueError that "Microsecond dates are not currently supported".

Expected behavior The timesketch CLI does not produce an error and lists the saved search information.