From f235149863fbd3480b983eeb9d8211bff97bac3a Mon Sep 17 00:00:00 2001 From: Sean Whalen Date: Mon, 8 Oct 2018 14:22:43 -0400 Subject: [PATCH] 4.2.0 - Save each aggregate report record as a separate Splunk event --- CHANGELOG.md | 5 +++++ parsedmarc/__init__.py | 2 +- parsedmarc/splunk.py | 11 ++++++----- setup.py | 2 +- 4 files changed, 13 insertions(+), 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b31dc26..1176ee2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,8 @@ +4.2.0 +------ + +- Save each aggregate report record as a separate Splunk event + 4.1.9 ----- diff --git a/parsedmarc/__init__.py b/parsedmarc/__init__.py index 03c98e9..cc075e3 100644 --- a/parsedmarc/__init__.py +++ b/parsedmarc/__init__.py @@ -44,7 +44,7 @@ import imapclient.exceptions import dateparser import mailparser -__version__ = "4.1.9" +__version__ = "4.2.0" logger = logging.getLogger(__name__) logger.setLevel(logging.ERROR) diff --git a/parsedmarc/splunk.py b/parsedmarc/splunk.py index 96189b9..8448d15 100644 --- a/parsedmarc/splunk.py +++ b/parsedmarc/splunk.py @@ -93,11 +93,12 @@ class HECClient(object): new_report["spf_results"] = record["auth_results"][ "spf"] - data["sourcetype"] = "dmarc:aggregate" - timestamp = human_timestamp_to_timestamp(new_report["begin_date"]) - data["time"] = timestamp - data["event"] = new_report.copy() - json_str += "{0}\n".format(json.dumps(data)) + data["sourcetype"] = "dmarc:aggregate" + timestamp = human_timestamp_to_timestamp( + new_report["begin_date"]) + data["time"] = timestamp + data["event"] = new_report.copy() + json_str += "{0}\n".format(json.dumps(data)) try: response = self.session.post(self.url, data=json_str).json() except Exception as e: diff --git a/setup.py b/setup.py index 2ff8ee6..fe80350 100644 --- a/setup.py +++ b/setup.py @@ -14,7 +14,7 @@ from setuptools import setup from codecs import open from os import path -__version__ = "4.1.9" +__version__ = "4.2.0" description = "A Python package and CLI for parsing aggregate and " \ "forensic DMARC reports"