admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Forcing a timeout... certain indexes

Browse Source 
may continue growing and never have
the same number of events!
This commit is contained in:
pyth0n1c
2022-06-06 16:53:15 -07:00
parent d3da287905
commit 7a18850877
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/docker_detection_tester/modules/splunk_sdk.py
+3 -1
View File
@@ -94,11 +94,13 @@ def get_number_of_indexed_events(splunk_host, splunk_port, splunk_password, inde
def wait_for_indexing_to_complete(splunk_host, splunk_port, splunk_password, sourcetype:str, index:str, check_interval_seconds:int=10)->bool:
MAX_WAIT_TIME = 60
startTime = timeit.default_timer()
previous_count = -1
time.sleep(check_interval_seconds)
while True:
if (timeit.default_timer() - startTime) > 60:
print("force timeout! assume we are done indexing")
new_count = get_number_of_indexed_events(splunk_host, splunk_port, splunk_password, index=index, sourcetype=sourcetype)
#print(f"Previous Count [{previous_count}] New Count [{new_count}]")
if previous_count == -1: