jorritfolmer / TA-dmarc

Add-on for ingesting DMARC aggregate reports into Splunk
https://splunkbase.splunk.com/app/3752
15 stars 8 forks source link

The DMARC reports inconsistantly use of case #18

Closed ChristopherGAndrews closed 6 years ago

ChristopherGAndrews commented 6 years ago

I am trying to create reports off the DMARC reports uploaded by this app. It seems that some DMARC reported capitalize some value in the XML fields, for example:

Could we have the code that converts the XML to Splunk friendly data lowercase all of the data? I do not see any fields that would be case sensitive. It is awkward and CPU intensive to do eval lowers on all the fields in Splunk.

jorritfolmer commented 6 years ago

Hi thanks for reporting this issue! I'll fix this probably somewhere this weekend.

jorritfolmer commented 6 years ago

Fixed in v3.0.2