diff --git a/.licenserc.yaml b/.licenserc.yaml index 1cdaefb5a..ca180cbdf 100644 --- a/.licenserc.yaml +++ b/.licenserc.yaml @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 991815898..107939446 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/.releaserc b/.releaserc index 2bb73569d..c42d2f2f3 100644 --- a/.releaserc +++ b/.releaserc @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/Dockerfile.splunk b/Dockerfile.splunk index 6b8a4ed97..6ed70cf9b 100644 --- a/Dockerfile.splunk +++ b/Dockerfile.splunk @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/Dockerfile.tests b/Dockerfile.tests index d00b15b8e..f7625edd7 100644 --- a/Dockerfile.tests +++ b/Dockerfile.tests @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/Dockerfile.uf b/Dockerfile.uf index c4d16ce77..60943738a 100644 --- a/Dockerfile.uf +++ b/Dockerfile.uf @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/docker-compose.yml b/docker-compose.yml index 347bd5745..b49b6b6ec 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/mkdocs.yml b/mkdocs.yml index 51c1516fe..e6bb71eac 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pyproject.toml b/pyproject.toml index 625aa000c..c35190e80 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest.ini b/pytest.ini index c276c43e9..b4013ac85 100644 --- a/pytest.ini +++ b/pytest.ini @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/CIM_Models/__init__.py b/pytest_splunk_addon/CIM_Models/__init__.py index b34a79900..cb8e7bbdd 100644 --- a/pytest_splunk_addon/CIM_Models/__init__.py +++ b/pytest_splunk_addon/CIM_Models/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/CIM_Models/datamodel_definition.py b/pytest_splunk_addon/CIM_Models/datamodel_definition.py index 326674983..466c91914 100644 --- a/pytest_splunk_addon/CIM_Models/datamodel_definition.py +++ b/pytest_splunk_addon/CIM_Models/datamodel_definition.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -1661,10 +1661,13 @@ "app", "dest", "severity", + "signature", "signature_id", "src", "type", "user", + "description", + "id", ] }, "Application_State": { @@ -1673,7 +1676,8 @@ "Services": ["service", "service_id", "start_mode", "status"], }, "Authentication": { - "BaseEvent": ["action", "app", "src", "src_user", "dest", "user"] + "BaseEvent": ["action", "app", "src", "dest", "user"], + "Privileged_Authentication": ["src_user"], }, "Certificates": { "SSL": [ @@ -1683,18 +1687,36 @@ "ssl_hash", "ssl_issuer", "ssl_issuer_common_name", - "ssl_issuer_email_domain", "ssl_subject", "ssl_subject_common_name", - "ssl_subject_email_domain", + "ssl_subject_organization", + "ssl_validity_window", ] }, "Change": { "Account_Management": [ - "dest_nt_domain", - "src_nt_domain", "src_user", + "object_category", + ], + "BaseEvent": [ + "change_type", + "command", + "dest", + "dvc", + "object", + "object_attrs", + "object_id", + "status", + "result", + "src", + "user", + "vendor_product", + "action", ], + "Instance_Changes": ["image_id", "instance_type"], + }, + "Change_Analysis": { + "Account_Management": ["dest_nt_domain", "src_nt_domain", "src_user"], "BaseEvent": [ "change_type", "command", @@ -1713,6 +1735,354 @@ "vendor_product", "action", ], + "Filesystem_Changes": [ + "file_access_time", + "file_create_time", + "file_hash", + "file_modify_time", + "file_name", + "file_path", + "file_acl", + "file_size", + ], + }, + "Compute_Inventory": { + "BaseEvent": ["dest", "vendor_product"], + "CPU": ["cpu_cores", "cpu_count", "cpu_mhz"], + "Memory": ["mem"], + "Network": ["dns", "interface", "ip", "mac", "name"], + "OS": ["os"], + "Snapshot": ["size", "snapshot"], + "Storage": ["mount", "storage"], + "User": ["interactive", "password", "user"], + "Virtual_OS": ["hypervisor"], + }, + "DLP": { + "BaseEvent": [ + "action", + "category", + "dvc", + "dlp_type", + "object", + "object_path", + "object_category", + "signature", + "severity", + "src", + "src_user", + "dest", + "user", + "vendor_product", + "app", + ] + }, + "Data_Access": { + "BaseEvent": [ + "action", + "app", + "dest", + "object", + "object_attrs", + "object_category", + "object_id", + "object_size", + "src", + "user_name", + "vendor_account", + "user", + "vendor_product", + ] + }, + "Email": { + "BaseEvent": [ + "action", + "dest", + "src", + "recipient", + "recipient_domain", + "src_user", + "src_user_domain", + "vendor_product", + "internal_message_id", + "message_id", + "protocol", + "return_addr", + ], + "Filtering": ["signature"], + }, + "Endpoint": { + "Filesystem": [ + "file_create_time", + "file_modify_time", + "action", + "dest", + "file_hash", + "file_name", + "file_path", + "file_acl", + "file_size", + "user", + "vendor_product", + ], + "Ports": [ + "dest_port", + "transport", + "src", + "src_port", + "transport_dest_port", + "dest", + "vendor_product", + "state", + ], + "Processes": [ + "action", + "dest", + "parent_process", + "parent_process_name", + "process", + "process_name", + "process_id", + "process_path", + "parent_process_id", + "parent_process_path", + "user", + "vendor_product", + ], + "Registry": [ + "action", + "dest", + "registry_path", + "registry_key_name", + "registry_value_data", + "registry_value_name", + "registry_value_type", + "user", + "vendor_product", + "status", + "registry_hive", + "registry_value_text", + ], + "Services": [ + "dest", + "service", + "service_name", + "service_path", + "service_id", + "start_mode", + "status", + "user", + "vendor_product", + ], + }, + "Event_Signatures": {"BaseEvent": ["dest", "signature", "signature_id"]}, + "Intrusion_Detection": { + "BaseEvent": [ + "dvc", + "ids_type", + "category", + "signature", + "severity", + "src", + "dest", + "vendor_product", + "action", + ] + }, + "Malware": { + "BaseEvent": [ + "action", + "category", + "dest", + "severity", + "signature", + "file_name", + "file_path", + "vendor_product", + ], + "Malware_Operations": [ + "signature_version", + "dest", + "vendor_product", + ], + }, + "Network_Resolution": { + "BaseEvent": [ + "answer", + "dest", + "message_type", + "query", + "reply_code_id", + "reply_code", + "vendor_product", + "src", + "transport", + "answer_count", + "query_count", + "query_type", + "record_type", + "response_time", + "transaction_id", + ] + }, + "Network_Sessions": { + "BaseEvent": [ + "dest_ip", + "dest_mac", + "vendor_product", + "action", + "signature", + ], + "DHCP": ["lease_duration"], + "VPN": ["user"], + }, + "Network_Traffic": { + "BaseEvent": [ + "action", + "bytes", + "bytes_in", + "bytes_out", + "dest", + "dest_port", + "dvc", + "src", + "src_port", + "transport", + "vendor_product", + "app", + "packets", + "packets_in", + "packets_out", + "protocol", + ] + }, + "Performance": { + "BaseEvent": ["dest"], + "CPU": ["cpu_load_percent"], + "Facilities": ["temperature"], + "Memory": ["mem", "mem_free", "mem_used"], + "Network": ["thruput"], + "OS": ["signature"], + "Storage": [ + "storage_free", + "storage_free_percent", + "storage_used", + "storage_used_percent", + ], + "Timesync": ["action"], + "Uptime": ["uptime"], + }, + "Ticket_Management": { + "BaseEvent": [ + "priority", + "severity", + "severity_id", + "status", + "dest", + "ticket_id", + ] + }, + "Updates": { + "BaseEvent": [ + "dest", + "signature", + "signature_id", + "status", + "vendor_product", + "dvc", + "file_name", + ] + }, + "Vulnerabilities": { + "BaseEvent": [ + "category", + "cve", + "dest", + "dvc", + "severity", + "signature", + "vendor_product", + "cvss", + ] + }, + "Web": { + "BaseEvent": [ + "action", + "bytes", + "bytes_in", + "bytes_out", + "dest", + "http_method", + "http_user_agent", + "src", + "status", + "url", + "url_domain", + "user", + "vendor_product", + "category", + "dest_port", + "http_user_agent_length", + ] + }, + }, + "6.0.0": { + "Alerts": { + "BaseEvent": [ + "app", + "dest", + "severity", + "signature", + "signature_id", + "src", + "type", + "user", + "description", + "id", + ] + }, + "Application_State": { + "BaseEvent": ["dest", "process"], + "Ports": ["dest_port", "transport"], + "Services": ["service", "service_id", "start_mode", "status"], + }, + "Authentication": { + "BaseEvent": ["action", "app", "src", "dest", "user"], + "Privileged_Authentication": ["src_user"], + }, + "Certificates": { + "SSL": [ + "ssl_end_time", + "ssl_serial", + "ssl_start_time", + "ssl_hash", + "ssl_issuer", + "ssl_issuer_common_name", + "ssl_subject", + "ssl_subject_common_name", + "ssl_subject_organization", + "ssl_validity_window", + ] + }, + "Change": { + "Account_Management": [ + "src_user", + "object_category", + ], + "BaseEvent": [ + "change_type", + "command", + "dest", + "dvc", + "object", + "object_attrs", + "object_id", + "status", + "result", + "src", + "user", + "vendor_product", + "action", + ], "Instance_Changes": ["image_id", "instance_type"], }, "Change_Analysis": { @@ -1773,6 +2143,7 @@ "dest", "user", "vendor_product", + "app", ] }, "Data_Access": { @@ -1802,12 +2173,15 @@ "src_user", "src_user_domain", "vendor_product", + "internal_message_id", + "message_id", + "protocol", + "return_addr", ], "Filtering": ["signature"], }, "Endpoint": { "Filesystem": [ - "file_access_time", "file_create_time", "file_modify_time", "action", @@ -1825,18 +2199,22 @@ "transport", "src", "src_port", + "transport_dest_port", "dest", - "user", "vendor_product", + "state", ], "Processes": [ + "action", "dest", - "loaded_file", - "original_file_name", "parent_process", "parent_process_name", "process", "process_name", + "process_id", + "process_path", + "parent_process_id", + "parent_process_path", "user", "vendor_product", ], @@ -1850,11 +2228,15 @@ "registry_value_type", "user", "vendor_product", + "status", + "registry_hive", + "registry_value_text", ], "Services": [ "dest", "service", "service_name", + "service_path", "service_id", "start_mode", "status", @@ -1862,7 +2244,7 @@ "vendor_product", ], }, - "Event_Signatures": {"BaseEvent": ["vendor_product"]}, + "Event_Signatures": {"BaseEvent": ["dest", "signature", "signature_id"]}, "Intrusion_Detection": { "BaseEvent": [ "dvc", @@ -1872,27 +2254,24 @@ "severity", "src", "dest", - "user", "vendor_product", + "action", ] }, "Malware": { "BaseEvent": [ "action", "category", - "date", "dest", - "dest_nt_domain", "severity", "signature", - "user", + "file_name", + "file_path", "vendor_product", ], "Malware_Operations": [ - "product_version", "signature_version", "dest", - "dest_nt_domain", "vendor_product", ], }, @@ -1905,17 +2284,26 @@ "reply_code_id", "reply_code", "vendor_product", + "src", + "transport", + "answer_count", + "query_count", + "query_type", + "record_type", + "response_time", + "transaction_id", ] }, "Network_Sessions": { "BaseEvent": [ "dest_ip", "dest_mac", - "dest_nt_host", - "dest_dns", - "user", "vendor_product", - ] + "action", + "signature", + ], + "DHCP": ["lease_duration"], + "VPN": ["user"], }, "Network_Traffic": { "BaseEvent": [ @@ -1926,12 +2314,15 @@ "dest", "dest_port", "dvc", - "rule", "src", "src_port", "transport", - "user", "vendor_product", + "app", + "packets", + "packets_in", + "packets_out", + "protocol", ] }, "Performance": { @@ -1950,6 +2341,16 @@ "Timesync": ["action"], "Uptime": ["uptime"], }, + "Ticket_Management": { + "BaseEvent": [ + "priority", + "severity", + "severity_id", + "status", + "dest", + "ticket_id", + ] + }, "Updates": { "BaseEvent": [ "dest", @@ -1957,6 +2358,8 @@ "signature_id", "status", "vendor_product", + "dvc", + "file_name", ] }, "Vulnerabilities": { @@ -1968,6 +2371,7 @@ "severity", "signature", "vendor_product", + "cvss", ] }, "Web": { @@ -1977,10 +2381,7 @@ "bytes_in", "bytes_out", "dest", - "http_content_type", "http_method", - "http_referrer", - "http_referrer_domain", "http_user_agent", "src", "status", @@ -1988,9 +2389,12 @@ "url_domain", "user", "vendor_product", + "category", + "dest_port", + "http_user_agent_length", ] }, }, } -datamodels["latest"] = datamodels["5.3.2"] +datamodels["latest"] = datamodels["6.0.0"] diff --git a/pytest_splunk_addon/__init__.py b/pytest_splunk_addon/__init__.py index dc71d3913..29f0cab7b 100644 --- a/pytest_splunk_addon/__init__.py +++ b/pytest_splunk_addon/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/addon_parser/__init__.py b/pytest_splunk_addon/addon_parser/__init__.py index 6b79da433..776af05f7 100644 --- a/pytest_splunk_addon/addon_parser/__init__.py +++ b/pytest_splunk_addon/addon_parser/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/addon_parser/eventtype_parser.py b/pytest_splunk_addon/addon_parser/eventtype_parser.py index b33f12ecc..d5330ef06 100644 --- a/pytest_splunk_addon/addon_parser/eventtype_parser.py +++ b/pytest_splunk_addon/addon_parser/eventtype_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/addon_parser/fields.py b/pytest_splunk_addon/addon_parser/fields.py index a0826bf9c..6be2c96af 100644 --- a/pytest_splunk_addon/addon_parser/fields.py +++ b/pytest_splunk_addon/addon_parser/fields.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/addon_parser/props_parser.py b/pytest_splunk_addon/addon_parser/props_parser.py index 816716fd0..b783c3631 100644 --- a/pytest_splunk_addon/addon_parser/props_parser.py +++ b/pytest_splunk_addon/addon_parser/props_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/addon_parser/savedsearches_parser.py b/pytest_splunk_addon/addon_parser/savedsearches_parser.py index fdd24a1ac..aaa38fc76 100644 --- a/pytest_splunk_addon/addon_parser/savedsearches_parser.py +++ b/pytest_splunk_addon/addon_parser/savedsearches_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/addon_parser/tags_parser.py b/pytest_splunk_addon/addon_parser/tags_parser.py index 23d709103..2820aeb30 100644 --- a/pytest_splunk_addon/addon_parser/tags_parser.py +++ b/pytest_splunk_addon/addon_parser/tags_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/addon_parser/transforms_parser.py b/pytest_splunk_addon/addon_parser/transforms_parser.py index c52e415f0..760ca0549 100644 --- a/pytest_splunk_addon/addon_parser/transforms_parser.py +++ b/pytest_splunk_addon/addon_parser/transforms_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/app_test_generator.py b/pytest_splunk_addon/app_test_generator.py index c8861194f..a4f9c8e56 100644 --- a/pytest_splunk_addon/app_test_generator.py +++ b/pytest_splunk_addon/app_test_generator.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_compliance/__init__.py b/pytest_splunk_addon/cim_compliance/__init__.py index ec67c2d26..df9c66768 100644 --- a/pytest_splunk_addon/cim_compliance/__init__.py +++ b/pytest_splunk_addon/cim_compliance/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_compliance/base_report.py b/pytest_splunk_addon/cim_compliance/base_report.py index 8ac999731..62209a20f 100644 --- a/pytest_splunk_addon/cim_compliance/base_report.py +++ b/pytest_splunk_addon/cim_compliance/base_report.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_compliance/base_table.py b/pytest_splunk_addon/cim_compliance/base_table.py index 463e284e4..badd1da52 100644 --- a/pytest_splunk_addon/cim_compliance/base_table.py +++ b/pytest_splunk_addon/cim_compliance/base_table.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_compliance/cim_report_generator.py b/pytest_splunk_addon/cim_compliance/cim_report_generator.py index 5da6ae190..e4a272d3d 100644 --- a/pytest_splunk_addon/cim_compliance/cim_report_generator.py +++ b/pytest_splunk_addon/cim_compliance/cim_report_generator.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_compliance/markdown_report.py b/pytest_splunk_addon/cim_compliance/markdown_report.py index 36f998093..93bae0f5c 100644 --- a/pytest_splunk_addon/cim_compliance/markdown_report.py +++ b/pytest_splunk_addon/cim_compliance/markdown_report.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_compliance/markdown_table.py b/pytest_splunk_addon/cim_compliance/markdown_table.py index 81741ccbf..11bb8ccf9 100644 --- a/pytest_splunk_addon/cim_compliance/markdown_table.py +++ b/pytest_splunk_addon/cim_compliance/markdown_table.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_compliance/plugin.py b/pytest_splunk_addon/cim_compliance/plugin.py index 5f95855bd..9210ca97d 100644 --- a/pytest_splunk_addon/cim_compliance/plugin.py +++ b/pytest_splunk_addon/cim_compliance/plugin.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/__init__.py b/pytest_splunk_addon/cim_tests/__init__.py index aadfac6ca..ef6dd571f 100644 --- a/pytest_splunk_addon/cim_tests/__init__.py +++ b/pytest_splunk_addon/cim_tests/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/base_schema.py b/pytest_splunk_addon/cim_tests/base_schema.py index 578fdc8e6..2fe89ce1e 100644 --- a/pytest_splunk_addon/cim_tests/base_schema.py +++ b/pytest_splunk_addon/cim_tests/base_schema.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/data_model.py b/pytest_splunk_addon/cim_tests/data_model.py index 49efdad75..121fd35fc 100644 --- a/pytest_splunk_addon/cim_tests/data_model.py +++ b/pytest_splunk_addon/cim_tests/data_model.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/data_model_handler.py b/pytest_splunk_addon/cim_tests/data_model_handler.py index e8dc4f589..cb5265ef4 100644 --- a/pytest_splunk_addon/cim_tests/data_model_handler.py +++ b/pytest_splunk_addon/cim_tests/data_model_handler.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/data_set.py b/pytest_splunk_addon/cim_tests/data_set.py index a79ce6021..e596fb6c4 100644 --- a/pytest_splunk_addon/cim_tests/data_set.py +++ b/pytest_splunk_addon/cim_tests/data_set.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/field_test_adapter.py b/pytest_splunk_addon/cim_tests/field_test_adapter.py index 354412079..aa0c270ee 100644 --- a/pytest_splunk_addon/cim_tests/field_test_adapter.py +++ b/pytest_splunk_addon/cim_tests/field_test_adapter.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/field_test_helper.py b/pytest_splunk_addon/cim_tests/field_test_helper.py index 28e307dba..dc5dedce2 100644 --- a/pytest_splunk_addon/cim_tests/field_test_helper.py +++ b/pytest_splunk_addon/cim_tests/field_test_helper.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/json_schema.py b/pytest_splunk_addon/cim_tests/json_schema.py index b3792587a..a8a4de0eb 100644 --- a/pytest_splunk_addon/cim_tests/json_schema.py +++ b/pytest_splunk_addon/cim_tests/json_schema.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/test_generator.py b/pytest_splunk_addon/cim_tests/test_generator.py index b61cbf398..55e88ea73 100644 --- a/pytest_splunk_addon/cim_tests/test_generator.py +++ b/pytest_splunk_addon/cim_tests/test_generator.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/cim_tests/test_templates.py b/pytest_splunk_addon/cim_tests/test_templates.py index 5324c1015..18c88a016 100644 --- a/pytest_splunk_addon/cim_tests/test_templates.py +++ b/pytest_splunk_addon/cim_tests/test_templates.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/data_models/Change.json b/pytest_splunk_addon/data_models/Change.json index fc3df7052..15a80ffa3 100644 --- a/pytest_splunk_addon/data_models/Change.json +++ b/pytest_splunk_addon/data_models/Change.json @@ -48,7 +48,7 @@ }, { "name": "object_category", - "validity": "if(tag==\"account\" AND object_category==user,object_category, null())", + "validity": "if((tag==\"account\" AND object_category==\"user\") OR tag!=\"account\",object_category, null())", "type": "required", "comment": "Generic name for the class of the updated resource object. Expected values may be specific to an app." }, diff --git a/pytest_splunk_addon/data_models/Network_Sessions.json b/pytest_splunk_addon/data_models/Network_Sessions.json index 87c5addb1..406d9de06 100644 --- a/pytest_splunk_addon/data_models/Network_Sessions.json +++ b/pytest_splunk_addon/data_models/Network_Sessions.json @@ -75,7 +75,7 @@ "name": "src_mac", "type": "optional", "condition": "tag != dhcp", - "validity": "if(match(src_mac,\"^([0-9A-F]{2}[:-]){5}([0-9A-F]{2})$\"),src_mac,null())", + "validity": "if(match(src_mac,\"^([0-9a-f]{2}:){5}([0-9a-f]{2})$\"),src_mac,null())", "comment": "The MAC address of the client initializing a network session. Not applicable for DHCP events.Note: Always force lower case on this field.Note: Always use colons instead of dashes, spaces, or no separator." }, { @@ -85,7 +85,7 @@ }, { "name": "src_ip", - "type": "conditional", + "type": "optional", "condition": "tag != dhcp", "comment": "The IP address of the client initializing a network session. Not applicable for DHCP events." }, diff --git a/pytest_splunk_addon/event_ingestors/__init__.py b/pytest_splunk_addon/event_ingestors/__init__.py index ada3ba3e2..1f61848f7 100644 --- a/pytest_splunk_addon/event_ingestors/__init__.py +++ b/pytest_splunk_addon/event_ingestors/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/event_ingestors/base_event_ingestor.py b/pytest_splunk_addon/event_ingestors/base_event_ingestor.py index 2b6df0d0e..c160066e2 100644 --- a/pytest_splunk_addon/event_ingestors/base_event_ingestor.py +++ b/pytest_splunk_addon/event_ingestors/base_event_ingestor.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/event_ingestors/file_monitor_ingestor.py b/pytest_splunk_addon/event_ingestors/file_monitor_ingestor.py index 2a17fa309..7d6208bc8 100644 --- a/pytest_splunk_addon/event_ingestors/file_monitor_ingestor.py +++ b/pytest_splunk_addon/event_ingestors/file_monitor_ingestor.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/event_ingestors/hec_event_ingestor.py b/pytest_splunk_addon/event_ingestors/hec_event_ingestor.py index b7fb8ae8e..a292492c2 100644 --- a/pytest_splunk_addon/event_ingestors/hec_event_ingestor.py +++ b/pytest_splunk_addon/event_ingestors/hec_event_ingestor.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/event_ingestors/hec_metric_ingestor.py b/pytest_splunk_addon/event_ingestors/hec_metric_ingestor.py index 4f53b124d..e8d5b108e 100644 --- a/pytest_splunk_addon/event_ingestors/hec_metric_ingestor.py +++ b/pytest_splunk_addon/event_ingestors/hec_metric_ingestor.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/event_ingestors/hec_raw_ingestor.py b/pytest_splunk_addon/event_ingestors/hec_raw_ingestor.py index 8df4ceccc..bcf12162d 100644 --- a/pytest_splunk_addon/event_ingestors/hec_raw_ingestor.py +++ b/pytest_splunk_addon/event_ingestors/hec_raw_ingestor.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/event_ingestors/ingestor_helper.py b/pytest_splunk_addon/event_ingestors/ingestor_helper.py index e11c8917e..56d7fff03 100644 --- a/pytest_splunk_addon/event_ingestors/ingestor_helper.py +++ b/pytest_splunk_addon/event_ingestors/ingestor_helper.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/event_ingestors/sc4s_event_ingestor.py b/pytest_splunk_addon/event_ingestors/sc4s_event_ingestor.py index 46db13aa7..284dae8b8 100644 --- a/pytest_splunk_addon/event_ingestors/sc4s_event_ingestor.py +++ b/pytest_splunk_addon/event_ingestors/sc4s_event_ingestor.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/fields_tests/__init__.py b/pytest_splunk_addon/fields_tests/__init__.py index 2b3ab9b8d..063351281 100644 --- a/pytest_splunk_addon/fields_tests/__init__.py +++ b/pytest_splunk_addon/fields_tests/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/fields_tests/field_bank.py b/pytest_splunk_addon/fields_tests/field_bank.py index fa6eac05a..103980043 100644 --- a/pytest_splunk_addon/fields_tests/field_bank.py +++ b/pytest_splunk_addon/fields_tests/field_bank.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/fields_tests/requirement_test_datamodel_tag_constants.py b/pytest_splunk_addon/fields_tests/requirement_test_datamodel_tag_constants.py index f1b66cdf3..c2f59660d 100644 --- a/pytest_splunk_addon/fields_tests/requirement_test_datamodel_tag_constants.py +++ b/pytest_splunk_addon/fields_tests/requirement_test_datamodel_tag_constants.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/fields_tests/sample_parser.py b/pytest_splunk_addon/fields_tests/sample_parser.py index 52b2b7335..a3e8ff657 100644 --- a/pytest_splunk_addon/fields_tests/sample_parser.py +++ b/pytest_splunk_addon/fields_tests/sample_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/fields_tests/test_generator.py b/pytest_splunk_addon/fields_tests/test_generator.py index 85374d4b2..20e662ab7 100644 --- a/pytest_splunk_addon/fields_tests/test_generator.py +++ b/pytest_splunk_addon/fields_tests/test_generator.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/fields_tests/test_templates.py b/pytest_splunk_addon/fields_tests/test_templates.py index c16cd11b0..fdd9dd344 100644 --- a/pytest_splunk_addon/fields_tests/test_templates.py +++ b/pytest_splunk_addon/fields_tests/test_templates.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/index_tests/__init__.py b/pytest_splunk_addon/index_tests/__init__.py index 6b94a365f..b6ada7dec 100644 --- a/pytest_splunk_addon/index_tests/__init__.py +++ b/pytest_splunk_addon/index_tests/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/index_tests/key_fields.py b/pytest_splunk_addon/index_tests/key_fields.py index 3d44d2f2f..131ea7b74 100644 --- a/pytest_splunk_addon/index_tests/key_fields.py +++ b/pytest_splunk_addon/index_tests/key_fields.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/index_tests/test_generator.py b/pytest_splunk_addon/index_tests/test_generator.py index ae989990c..bc6ceb849 100644 --- a/pytest_splunk_addon/index_tests/test_generator.py +++ b/pytest_splunk_addon/index_tests/test_generator.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/index_tests/test_templates.py b/pytest_splunk_addon/index_tests/test_templates.py index 84c5729b5..ae3fe6ab7 100644 --- a/pytest_splunk_addon/index_tests/test_templates.py +++ b/pytest_splunk_addon/index_tests/test_templates.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/plugin.py b/pytest_splunk_addon/plugin.py index 3926774d4..8236286f2 100644 --- a/pytest_splunk_addon/plugin.py +++ b/pytest_splunk_addon/plugin.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/__init__.py b/pytest_splunk_addon/sample_generation/__init__.py index d058bc2f9..288be4aa4 100644 --- a/pytest_splunk_addon/sample_generation/__init__.py +++ b/pytest_splunk_addon/sample_generation/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/pytest_splunk_addon_data_parser.py b/pytest_splunk_addon/sample_generation/pytest_splunk_addon_data_parser.py index 738c2ba65..ad72cb62b 100644 --- a/pytest_splunk_addon/sample_generation/pytest_splunk_addon_data_parser.py +++ b/pytest_splunk_addon/sample_generation/pytest_splunk_addon_data_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/rule.py b/pytest_splunk_addon/sample_generation/rule.py index 8aeb5ac1a..4388dccd4 100644 --- a/pytest_splunk_addon/sample_generation/rule.py +++ b/pytest_splunk_addon/sample_generation/rule.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/sample_event.py b/pytest_splunk_addon/sample_generation/sample_event.py index 01cbb8680..793fe9721 100644 --- a/pytest_splunk_addon/sample_generation/sample_event.py +++ b/pytest_splunk_addon/sample_generation/sample_event.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/sample_generator.py b/pytest_splunk_addon/sample_generation/sample_generator.py index fb6d3a230..076325c0b 100644 --- a/pytest_splunk_addon/sample_generation/sample_generator.py +++ b/pytest_splunk_addon/sample_generation/sample_generator.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/sample_stanza.py b/pytest_splunk_addon/sample_generation/sample_stanza.py index 55d7cfce9..364e72a1a 100644 --- a/pytest_splunk_addon/sample_generation/sample_stanza.py +++ b/pytest_splunk_addon/sample_generation/sample_stanza.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/sample_xdist_generator.py b/pytest_splunk_addon/sample_generation/sample_xdist_generator.py index 7f797146c..9a72b33dd 100644 --- a/pytest_splunk_addon/sample_generation/sample_xdist_generator.py +++ b/pytest_splunk_addon/sample_generation/sample_xdist_generator.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/sample_generation/time_parser.py b/pytest_splunk_addon/sample_generation/time_parser.py index e9d67ec0a..6fa13210c 100644 --- a/pytest_splunk_addon/sample_generation/time_parser.py +++ b/pytest_splunk_addon/sample_generation/time_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/splunk.py b/pytest_splunk_addon/splunk.py index d81c03d3f..6eb78e1fe 100644 --- a/pytest_splunk_addon/splunk.py +++ b/pytest_splunk_addon/splunk.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/standard_lib/addon_basic.py b/pytest_splunk_addon/standard_lib/addon_basic.py index 8e29872c9..48baa6963 100644 --- a/pytest_splunk_addon/standard_lib/addon_basic.py +++ b/pytest_splunk_addon/standard_lib/addon_basic.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/utilities/__init__.py b/pytest_splunk_addon/utilities/__init__.py index a604b589c..770184387 100644 --- a/pytest_splunk_addon/utilities/__init__.py +++ b/pytest_splunk_addon/utilities/__init__.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/utilities/junit_parser.py b/pytest_splunk_addon/utilities/junit_parser.py index e4e53b06a..746173e48 100644 --- a/pytest_splunk_addon/utilities/junit_parser.py +++ b/pytest_splunk_addon/utilities/junit_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/utilities/log_helper.py b/pytest_splunk_addon/utilities/log_helper.py index b309a9266..069ad71e9 100644 --- a/pytest_splunk_addon/utilities/log_helper.py +++ b/pytest_splunk_addon/utilities/log_helper.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/utilities/sample_splitter.py b/pytest_splunk_addon/utilities/sample_splitter.py index 2e1a2b430..e6f33f8de 100644 --- a/pytest_splunk_addon/utilities/sample_splitter.py +++ b/pytest_splunk_addon/utilities/sample_splitter.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/utilities/xml_event_parser.py b/pytest_splunk_addon/utilities/xml_event_parser.py index d1ef03969..61e9f4d5b 100644 --- a/pytest_splunk_addon/utilities/xml_event_parser.py +++ b/pytest_splunk_addon/utilities/xml_event_parser.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/pytest_splunk_addon/utils.py b/pytest_splunk_addon/utils.py index 360335eb2..a4a2c1db8 100644 --- a/pytest_splunk_addon/utils.py +++ b/pytest_splunk_addon/utils.py @@ -1,5 +1,5 @@ # -# Copyright 2024 Splunk Inc. +# Copyright 2025 Splunk Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. diff --git a/tests/e2e/addons/TA_req_broken/samples/syslog.xml b/tests/e2e/addons/TA_req_broken/samples/syslog.xml index 04cd27e7c..22df6c3ec 100644 --- a/tests/e2e/addons/TA_req_broken/samples/syslog.xml +++ b/tests/e2e/addons/TA_req_broken/samples/syslog.xml @@ -28,6 +28,9 @@ bytes bytes_in bytes_out + packets + packets_in + packets_out dvc rule session_id @@ -70,6 +73,9 @@ bytes bytes_in bytes_out + packets + packets_in + packets_out dvc rule session_id