Skip to content

feat: support splunk ep tests#945

Merged
mkolasinski-splunk merged 11 commits intomainfrom
feat/support-splunk-ep-rebased
Feb 10, 2026
Merged

feat: support splunk ep tests#945
mkolasinski-splunk merged 11 commits intomainfrom
feat/support-splunk-ep-rebased

Conversation

@mkolasinski-splunk
Copy link
Contributor

@mkolasinski-splunk mkolasinski-splunk commented Feb 4, 2026

Changes:

  • New --splunk-ep CLI flag to enable Edge Processor mode
  • UUID-based event matching for CIM compliance tests when EP mode is enabled
  • Affected tests: test_cim_fields_recommended, test_requirement_fields, test_datamodels
  • Only HEC Event ingestor samples (modinput, windows_input) support EP mode
  • Other test types (field extraction, tags, eventtypes) work normally with EP

@mkolasinski-splunk mkolasinski-splunk requested a review from a team as a code owner February 5, 2026 07:46
@mkolasinski-splunk mkolasinski-splunk force-pushed the feat/support-splunk-ep-rebased branch from c799bbf to 9352582 Compare February 5, 2026 08:45
@mkolasinski-splunk mkolasinski-splunk changed the title feat: support splunk ep rebased feat: support splunk ep tests Feb 10, 2026
@mkolasinski-splunk mkolasinski-splunk merged commit 88f2118 into main Feb 10, 2026
23 of 24 checks passed
@mkolasinski-splunk mkolasinski-splunk deleted the feat/support-splunk-ep-rebased branch February 10, 2026 10:50
@github-actions github-actions bot locked and limited conversation to collaborators Feb 10, 2026
@srv-rr-github-token
Copy link
Contributor

🎉 This PR is included in version 6.4.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants