admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Small update to summarize_json.py to set show_splunk_app_password to True when generatingf the detection_failure_manifest.json file. This way, you can run that file directly as the configuration without making any other changes or passing command line values and get right into debugging everything

Browse Source
This commit is contained in:
pyth0n1c
2021-11-24 15:57:13 -08:00
parent eb01127d03
commit abd568f7d7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
automated_detection_testing/ci/detection_testing_batch/summarize_json.py
+1 -1
View File
@@ -56,7 +56,7 @@ def outputResultsJSON(output_filename:str, data:list[dict], baseline:OrderedDict
if len(fail_list) > 0:
failures_test_override = {"detections_list": fail_list, "interactive_failure":True,
"num_containers":1, "branch": baseline["branch"], "commit_hash":baseline["commit_hash"],
"mode":"selected"}
"mode":"selected", "show_splunk_app_password": True}
with open("detection_failure_manifest.json","w") as failures:
validate_args.validate_and_write(failures_test_override, failures)
except Exception as e: