9b04a100db
ci: splunk-sdk does not support python 3.12
...
https://github.com/splunk/splunk-sdk-python/issues/548
2023-11-11 04:44:07 +00:00
444b92a837
release: 0.1.0
2023-11-11 01:34:54 +00:00
1cd2ec36a8
fix: set time range to all time
...
https://docs.splunk.com/Documentation/Splunk/9.1.1/SearchReference/Collect#Events_without_timestamps
2023-11-11 01:33:10 +00:00
097ba9a3df
chore(pre-commit): update hooks
2023-10-01 10:10:49 +00:00
81ee292f1d
build: reset file permission
...
running in windows may set execution permission
that is not allowed in splunk cloud
2023-10-01 10:10:24 +00:00
4e084978b5
docs: add splunkbase page
2023-07-20 10:57:59 +00:00
b9d7dae295
release: 0.0.13
2023-07-18 10:37:40 +00:00
d677af89d9
fix(savedsearches): disable schedule by default
2023-07-18 10:27:04 +00:00
d5c2348beb
fix(manifest): check_that_app_passes_slim_validation_for_cloud
...
">=x.y" syntax is not supported
2023-07-18 10:09:43 +00:00
fd161d8b84
docs(manifest): limit to 2 categories
...
splunkbase limitation
2023-07-15 06:18:41 +00:00
14484f0e1b
release: 0.0.12
2023-07-15 01:18:23 +00:00
fe2e887a2e
ci: publish TA-malware-filter-*.tar.gz
2023-07-14 12:46:49 +00:00
7c91b86ed2
style: add icons
2023-07-14 12:44:42 +00:00
08e1f36499
fix: add minimal nav
2023-07-14 12:44:01 +00:00
099b117617
chore: ignore packaged app
2023-07-14 12:17:37 +00:00
7f83739b4c
docs: add app.manifest
...
https://dev.splunk.com/enterprise/reference/packagingtoolkit/pkgtoolkitappmanifest/
2023-07-14 12:16:27 +00:00
06fbf1c42e
docs: rename add-on
...
https://dev.splunk.com/enterprise/docs/releaseapps/splunkbase/namingguidelines/
2023-07-14 10:24:40 +00:00
414e8aa1de
docs: add repo mirros
2023-06-05 08:05:20 +00:00
135cc288f3
release: 0.0.11
2023-05-17 12:14:27 +00:00
eaad44b783
fix(conf): consistent value in [package] & [id]
2023-05-17 12:14:06 +00:00
f7ccb9b4ca
release: 0.0.10
2023-05-17 12:07:13 +00:00
25ffffcfa6
fix(conf): splunk cloud compatibility
2023-05-17 12:06:28 +00:00
9bfe891f02
release: 0.0.9
2023-05-16 10:13:06 +00:00
5981e01b3d
chore: dual-license under MIT & CC0
...
- OSI-approved license (e.g. MIT license) is required
for GitLab Open Source Program
- https://docs.gitlab.com/ee/subscriptions/community_programs.html#gitlab-for-open-source
2023-04-27 09:29:28 +00:00
bfbe280c27
docs: link to guide with more examples
2023-04-23 10:25:01 +00:00
c2fdaaa99a
docs: fix toc
2023-03-20 09:30:32 +00:00
5f11caab67
chore: ruff linter
...
- replace pylint & isort
2023-03-06 10:46:34 +00:00
34b8f39eca
fix: update botnet_ip.csv & opendbl_ip.csv every 15 minutes
2023-03-03 07:10:05 +00:00
05fd64af29
release: 0.0.8
2023-02-19 07:08:28 +00:00
7d615cb50f
feat: scheduled update lookups
2023-02-19 07:07:13 +00:00
5a18483c6f
docs: clarify download failover
2023-02-19 06:48:14 +00:00
975e1531bc
feat: add _time
...
so that generated records can be saved to index, if configured
2023-02-15 09:40:37 +00:00
10dc471223
release: 0.0.7
2023-02-10 20:32:51 +00:00
43cd977e94
docs: utilise splunk proxy setting
2023-02-10 20:32:13 +00:00
368fa19db8
feat: download mirrors
2023-02-10 20:24:03 +00:00
60dedb650e
release: 0.0.6
2023-02-08 10:08:05 +00:00
f624f1fee7
build: exclude requests lib
...
- use splunk built-in, maybe useful for certifi cacert.pem
style: add path instead of __init__.py
style: remove shebang (not meant to be executed by generic python)
2023-02-08 10:06:21 +00:00
3a288d036b
release: 0.0.5
2023-02-06 06:45:41 +00:00
736bb44cc6
docs: tested with splunk 9
2023-02-06 06:45:18 +00:00
fe8476e2c1
fix: remove splunk 8 compatibility
...
app is not compatible with SCP1 "chunked=false"
Revert "fix: compatibility with splunk 8"
This reverts commit 0cc9e2fd64
2023-02-06 06:40:51 +00:00
c1a572f845
style: escape regex char
2023-02-04 22:40:01 +00:00
4a7d385459
release: 0.0.4
2023-02-04 22:31:55 +00:00
0cc9e2fd64
fix: compatibility with splunk 8
2023-02-04 22:31:02 +00:00
b6238927b5
release: 0.0.3
2023-02-04 10:04:13 +00:00
5c9eb9523b
docs: workaround for splunk 8.x
2023-02-04 10:02:58 +00:00
9982d3ba68
build: exclude requirements.txt
2023-02-04 09:46:23 +00:00
7529622fb2
fix(getopendbl): rename "cidr" column to "cidr_range"
...
to avoid confusion with match_type CIDR() in lookup definition
2023-02-04 06:42:43 +00:00
f0d9ad0ecb
style(commands): remove irrelevant "generating" config
...
when "chunked" is enabled
https://docs.splunk.com/Documentation/Splunk/9.0.3/Admin/Commandsconf
2023-02-04 06:40:21 +00:00
1f47e18b7f
fix(metadata): dedup config
2023-02-04 06:39:44 +00:00
e4c5ffb118
feat: add lookup definition
2023-02-04 06:38:50 +00:00
Ming Di Leom