-
Notifications
You must be signed in to change notification settings - Fork 21
chore: ADDON-80802 PSA implementation with uuid flag #906
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
chore: ADDON-80802 PSA implementation with uuid flag #906
Conversation
91f22e9
to
baf6cf0
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am OK with that. But not having full picture so owning team should verify.
@@ -115,20 +118,21 @@ def ingest(self, events, thread_count): | |||
|
|||
def __ingest(self, data): | |||
try: | |||
batch_data = "\n".join(json.dumps(obj) for obj in data) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why do we need to batch here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi Michal, this change was done by you for sending the events to EP and merged to develop but it is not yet merged to main. My MR is against main and I wanted this code change to test the KO with SPL2 in workflow. So added this code in my MR.
Your MR: https://github.com/splunk/pytest-splunk-addon/pull/904/files
95b9198
to
3ef7f06
Compare
3ef7f06
to
739878c
Compare
Currently, PSA uses the raw event in the search query for the “test_requirements_fields” test. So, in order to run the test for SPL2 transformed events, the logs repo samples needs to be updated with the SPL2 transformed logs. To avoid updating the logs repo samples, we can update the search query in PSA to use a unique uuid instead of using the raw event by using the uuid flag.
JIRA: https://splunk.atlassian.net/browse/ADDON-80802