splunk / splunk/pytest-splunk-addon
Requirement test events if not mapped to any CIM DM are not ingested
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 66
- Forks
- 21
- Avg merge
- 4d 13h
- Merged PRs (30d)
- 2
Description
Example event:
<event code="" name="HttpSessionDestroyedContainerBackgroundProcessor" format="">
<transport type="modinput" sourcetype="jira:datacenter:security:log" source="/var/atlassian/application-data/jira/log/atlassian-jira-security.log" host="so1" />
<source>
<jira id="" />
<comment>lab</comment>
</source>
<raw><![CDATA[2022-01-03 10:30:02,172+0000 ContainerBackgroundProcessor[StandardEngine[Catalina]] HttpSession [1abc2de] destroyed for 'someone']]></raw>
<cim />
</event>
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing how requirement test events are parsed and filtered, using the XML event in the issue as the reproduction case. Confirm that an event with an empty element is ingested even when it is not mapped to a CIM data model, and add or update coverage for that behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- testing
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100