From 55a57ddd133a72a7f499da35ff56a190bd8da1fc Mon Sep 17 00:00:00 2001
From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Date: Tue, 13 Sep 2022 17:06:05 -0700
Subject: [PATCH] Remnoved extra kwargs from delete api call

---
 bin/docker_detection_tester/modules/splunk_sdk.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/bin/docker_detection_tester/modules/splunk_sdk.py b/bin/docker_detection_tester/modules/splunk_sdk.py
index 7ddf8e4f98..a4875cc0ed 100644
--- a/bin/docker_detection_tester/modules/splunk_sdk.py
+++ b/bin/docker_detection_tester/modules/splunk_sdk.py
@@ -207,9 +207,7 @@ def delete_attack_data(splunk_host:str, splunk_password:str, splunk_port:int, in
         while (get_number_of_indexed_events(splunk_host, splunk_port, splunk_password, index=index, event_host=host) != 0) :
             splunk_search = f'search index="{index}" host="{host}" | delete'
             kwargs = {
-                    "exec_mode": "blocking",
-                    "dispatch.earliest_time": "-1d",
-                    "dispatch.latest_time": "now"}
+                    "exec_mode": "blocking"}
             try:
                 
                 job = service.jobs.create(splunk_search, **kwargs)