Code

HDF2Splunk Updates#2705

Code

Merged

camdenmoors merged 44 commits intomastermitre/heimdall2:masterfrom hdf2splunkUpdatesmitre/heimdall2:hdf2splunkUpdatesCopy head branch name to clipboardMar 7, 2022

+12,906-12,749

Commits

Commits on Mar 7, 2022

• Don't assume descriptions is defined

  Show description for f9647a1
  camdenmoors

  committed
  f9647a1

  Copy full SHA for f9647a1

• Add Splunk Logging

  camdenmoors

  committed
  a6e7cb1

  Copy full SHA for a6e7cb1

• Add insecure mode

  camdenmoors

  committed
  fb103e9

  Copy full SHA for fb103e9

• Merge branch 'master' into splunkUpdates

  camdenmoors

  committed
  ea30ad1

  Copy full SHA for ea30ad1

• Upload multiple items to collector at once

  camdenmoors

  committed
  2b67ec9

  Copy full SHA for 2b67ec9

• Remove set index value, add hint for hostname field, fix profile subtype meta value

  camdenmoors

  committed
  771b849

  Copy full SHA for 771b849

• Revert "Upload multiple items to collector at once"

  Show description for ccfa6ad
  camdenmoors

  committed
  ccfa6ad

  Copy full SHA for ccfa6ad

• Add hint for admin

  camdenmoors

  committed
  95aea3e

  Copy full SHA for 95aea3e

• Remove spath.meta

  camdenmoors

  committed
  17ae046

  Copy full SHA for 17ae046

• Use index="*"

  camdenmoors

  committed
  4ea199a

  Copy full SHA for 4ea199a

• Set empty array for Profile.controls

  camdenmoors

  committed
  09152cb

  Copy full SHA for 09152cb

• Log getExecution result

  camdenmoors

  committed
  0162634

  Copy full SHA for 0162634

• Use replaceKeyValue descriptions

  camdenmoors

  committed
  a7f3f38

  Copy full SHA for a7f3f38

• Allow undefined return values, remove FileList log, increase timeout

  camdenmoors

  committed
  a572d18

  Copy full SHA for a572d18

• Add better error handling to SplunkReader, remove admin hint

  camdenmoors

  committed
  6405e1d

  Copy full SHA for 6405e1d

• Post test data to webhook

  camdenmoors

  committed
  a65af6c

  Copy full SHA for a65af6c

• Update test data, remove webhook

  camdenmoors

  committed
  abbc20f

  Copy full SHA for abbc20f

• Ignore LGTM issue and comment on insecure mode

  camdenmoors

  committed
  e19c397

  Copy full SHA for e19c397

• Allow passing custom search to SplunkReader

  camdenmoors

  committed
  6d00bf7

  Copy full SHA for 6d00bf7

• Use notify for success message

  camdenmoors

  committed
  2d46faf

  Copy full SHA for 2d46faf

• Revert "Allow passing custom search to SplunkReader"

  Show description for 8c7ccf8
  camdenmoors

  committed
  8c7ccf8

  Copy full SHA for 8c7ccf8

• Add title

  camdenmoors

  committed
  925f6e4

  Copy full SHA for 925f6e4

• Merge branch 'splunkUpdates' of https://github.com/mitre/heimdall2 into splunkUpdates

  camdenmoors

  committed
  4a8b235

  Copy full SHA for 4a8b235

• Clean up SplunkReader usability, add splunk-sdk to hdf-converters, delay in waiting for job

  camdenmoors

  committed
  11053e2

  Copy full SHA for 11053e2

• Switch to splunk-sdk for hdf2splunk, upload multiple events at once

  camdenmoors

  committed
  dea1380

  Copy full SHA for dea1380

• Switch to @mitre/splunk-sdk-no-env

  camdenmoors

  committed
  ccfa477

  Copy full SHA for ccfa477

• Follow Sonarqube suggestions, update mapper tests

  camdenmoors

  committed
  18fc56d

  Copy full SHA for 18fc56d

• Update splunk_reverse_mapper.spec.ts

  camdenmoors

  committed
  8edb1a6

  Copy full SHA for 8edb1a6

• Don't redefine err, change debug to verbose

  camdenmoors

  committed
  c1959dd

  Copy full SHA for c1959dd

• Remove splunk-sdk from frontend

  camdenmoors

  committed
  b1c42e4

  Copy full SHA for b1c42e4

• Post jobResponseData to webhook

  camdenmoors

  committed
  76f77b0

  Copy full SHA for 76f77b0

• Update upload index

  camdenmoors

  committed
  91d37e1

  Copy full SHA for 91d37e1

• Use HTTP scheme when posting data to splunk in CI

  camdenmoors

  committed
  af55281

  Copy full SHA for af55281

• Remove _raw parsing

  camdenmoors

  committed
  d98d136

  Copy full SHA for d98d136

• Use Event Breaker in CI

  camdenmoors

  committed
  bb4d76c

  Copy full SHA for bb4d76c

• Use volume without /opt/splunk

  camdenmoors

  committed
  501eddb

  Copy full SHA for 501eddb

• Handle Disabled Line Breaker in CI

  camdenmoors

  committed
  992066b

  Copy full SHA for 992066b

• Remove double result parsing

  camdenmoors

  committed
  80c9815

  Copy full SHA for 80c9815

• Specify Content-Type to webhook, log _raw

  camdenmoors

  committed
  cf23e0e

  Copy full SHA for cf23e0e

• Change event breaker newline to {{{FIX_EVENT_BREAKER_NEWLINE}}}

  camdenmoors

  committed
  4fb36ee

  Copy full SHA for 4fb36ee

• Update event breaker for splunkData.controls

  camdenmoors

  committed
  433dab8

  Copy full SHA for 433dab8

• Restore breaker type, remove expected data

  camdenmoors

  committed
  ab8ab42

  Copy full SHA for ab8ab42

• Only ensure no errors on upload, comment on tests

  camdenmoors

  committed
  144423a

  Copy full SHA for 144423a

• Remove waitForJob

  camdenmoors

  committed
  91cd1a1

  Copy full SHA for 91cd1a1