Merge branch 'PEX-396/extractor-index-switch' into 'develop'

PEX-396: Cutover to new extracto index

See merge request threat-research/security_content!1413

.gitlab-ci.yml

@@ -2,6 +2,9 @@ default:
   image: docker-hub.repo.splunkdev.net/python:3.9
 
 variables:
+  EXTRACTO_VERSION:
+    value: "1.0.60"
+    description: "The version of extracto to use"
   SKIP_DOWNSTREAM_TESTING:
     value: "False"
     description: "If true, downstream testing will be suppressed (useful for debugging or forcing a release in an emergency)."

pipeline/.post.yml

@@ -15,7 +15,7 @@ include:
 # download and configure extracto
 .setup_extracto: &setup_extracto
   - |
-    curl -u $ARTIFACTORY_AUTHORIZATION -L https://repo.splunkdev.net/artifactory/generic/extracto/1.0.60/linux_amd64/extracto -o extracto
+    curl -u $ARTIFACTORY_AUTHORIZATION -L $ARTIFACTORY_BASE_URL/generic/extracto/$EXTRACTO_VERSION/linux_amd64/extracto -o extracto
     chmod +x ./extracto
     cat > extracto_config.yml << EOF
     enrichers:
@@ -27,6 +27,7 @@ include:
     version: $ESCU_VERSION
 
     EOF
+  - export EXTRACTO_SPLUNK_INDEX="gitlab_extracto"
   - export EXTRACTO_CONFIG=./extracto_config.yml
 
 # send pipeline metadata to extracto