From 7c2047e2cf2d2bc2bb312fcb5392f7054600c87f Mon Sep 17 00:00:00 2001
From: pyth0n1c <87383215+pyth0n1c@users.noreply.github.com>
Date: Tue, 7 Jun 2022 13:05:05 -0700
Subject: [PATCH] Unbalanced quote - fixed

---
 bin/docker_detection_tester/modules/splunk_sdk.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/docker_detection_tester/modules/splunk_sdk.py b/bin/docker_detection_tester/modules/splunk_sdk.py
index 004d3a0ddc..6eeb06ee37 100644
--- a/bin/docker_detection_tester/modules/splunk_sdk.py
+++ b/bin/docker_detection_tester/modules/splunk_sdk.py
@@ -74,7 +74,7 @@ def get_number_of_indexed_events(splunk_host, splunk_port, splunk_password, inde
         raise(Exception("Unable to connect to Splunk instance: " + str(e)))
 
     if sourcetype is not None:
-        search = f'''search index="{index}" sourcetype="{sourcetype}" host="{event_host} | stats count'''
+        search = f'''search index="{index}" sourcetype="{sourcetype}" host="{event_host}" | stats count'''
     else:
         search = f'''search index="{index}" host="{event_host}" | stats count'''
     kwargs = {"exec_mode":"blocking"}