Skip to content

Conversation

spanchal-crest
Copy link
Collaborator

Currently, PSA uses the raw event in the search query for the “test_requirements_fields” test. So, in order to run the test for SPL2 transformed events, the logs repo samples needs to be updated with the SPL2 transformed logs. To avoid updating the logs repo samples, we can update the search query in PSA to use a unique uuid instead of using the raw event by using the uuid flag.

JIRA: https://splunk.atlassian.net/browse/ADDON-80802

@spanchal-crest spanchal-crest marked this pull request as ready for review June 24, 2025 11:53
@spanchal-crest spanchal-crest requested a review from a team as a code owner June 24, 2025 11:53
@spanchal-crest spanchal-crest force-pushed the spanchal/ADDON-80802-psa-implementation-using-uuid branch from 91f22e9 to baf6cf0 Compare June 25, 2025 04:41
mgazda-splunk
mgazda-splunk previously approved these changes Jun 25, 2025
Copy link

@mgazda-splunk mgazda-splunk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am OK with that. But not having full picture so owning team should verify.

@@ -115,20 +118,21 @@ def ingest(self, events, thread_count):

def __ingest(self, data):
try:
batch_data = "\n".join(json.dumps(obj) for obj in data)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we need to batch here?

Copy link
Collaborator Author

@spanchal-crest spanchal-crest Jun 30, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi Michal, this change was done by you for sending the events to EP and merged to develop but it is not yet merged to main. My MR is against main and I wanted this code change to test the KO with SPL2 in workflow. So added this code in my MR.

Your MR: https://github.com/splunk/pytest-splunk-addon/pull/904/files

@spanchal-crest spanchal-crest force-pushed the spanchal/ADDON-80802-psa-implementation-using-uuid branch 2 times, most recently from 3ef7f06 to 739878c Compare July 8, 2025 06:49
@spanchal-crest spanchal-crest force-pushed the spanchal/ADDON-80802-psa-implementation-using-uuid branch from 8f9f7c1 to 4442f69 Compare August 1, 2025 07:04
@spanchal-crest spanchal-crest changed the base branch from main to develop August 1, 2025 07:07
@spanchal-crest spanchal-crest force-pushed the spanchal/ADDON-80802-psa-implementation-using-uuid branch from 4442f69 to 02fbca3 Compare August 1, 2025 07:19
@spanchal-crest spanchal-crest force-pushed the spanchal/ADDON-80802-psa-implementation-using-uuid branch from 02fbca3 to bc1e289 Compare August 1, 2025 07:32
@dvarasani-crest
Copy link
Contributor

can you also add the e2e tests?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants