From 0cf2815f0d961e359928d4cddc91264654aee79c Mon Sep 17 00:00:00 2001 From: jzsplunk Date: Tue, 6 Apr 2021 18:59:17 -0700 Subject: [PATCH] [TR-563] change condition in ssa_validate.py to check for detections of type 'streaming' and not type 'SSA'. This will cause tests/QA based on this change to fail even though the SSA detections had been tested and working in the develop branch. --- bin/ssa_validate.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/ssa_validate.py b/bin/ssa_validate.py index e67372da8c..883011ad94 100644 --- a/bin/ssa_validate.py +++ b/bin/ssa_validate.py @@ -30,7 +30,7 @@ def main(args): if os.path.isfile(detection_file): with open(detection_file, 'r') as detection_fh: detection = yaml.safe_load(detection_fh) - if detection['type'] == "SSA": + if detection['type'] == "streaming": # Parsed file is a SSA detection log(logging.INFO, "Validating %s" % detection['name']) cur_status = validate_tags(detection)