amorfo77/parsedmarc
1
0
Fork 0
mirror of https://github.com/domainaware/parsedmarc.git synced 2026-06-25 03:24:18 +00:00
Code Issues Projects Releases Wiki Activity

Fix Splunk sourcetype to use colon separator (dmarc:failure) matching original convention

Browse Source 
Co-authored-by: seanthegeek <44679+seanthegeek@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-02-20 21:05:08 +00:00
committed by Sean Whalen
parent 23f2cb99c3
commit 851ac3b6f2
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
parsedmarc/splunk.py
+1 -1
View File
@@ -155,7 +155,7 @@ class HECClient(object):
json_str = ""
for report in failure_reports:
data = self._common_data.copy()
data["sourcetype"] = "dmarc_failure"
data["sourcetype"] = "dmarc:failure"
timestamp = human_timestamp_to_unix_timestamp(report["arrival_date_utc"])
data["time"] = timestamp
data["event"] = report.copy()