Merge pull request #13 from jimmyatSplunk/analysis-modular-input-fix

Update add-on to version 3.0.4

Author: codingWithJimmy

TA-bigfix.aob_meta

@@ -0,0 +1 @@
+{}

aob_events_in_meta.json

@@ -5,7 +5,7 @@
     "id": {
       "group": null,
       "name": "TA-bigfix",
-      "version": "3.0.3"
+      "version": "3.0.4"
     },
     "author": [
       {

app.manifest

@@ -28,7 +28,7 @@ def collect_events(helper, ew):
 
     opt_url_start=opt_root_url + ":" + opt_rest_api_port + "/api/query?output=json&relevance="
 
-    query='(%22analysis_id%3D%22+%2526+item+2+of+it+as+string%2C+%22analysis_name%3D%22+%2526+item+1+of+it%2C+%22property_name%3D%22+%2526+item+1+of+item+0+of+it%2C%22property_value%3D%22+%2526+item+0+of+item+0+of+item+0+of+it%2C+%22nt_host%3D%22+%2526+item+1+of+item+0+of+item+0+of+it%2C+%22client_id%3D%22+%2526+item+2+of+item+0+of+item+0+of+it+as+string%2C+%22site_name%3D%22+%2526+item+3+of+it)+of+((((values+of+it%2C+names+of+computer+of+it%2C+id+of+computer+of+it)+of+results+whose+(id+of+computer of+it+mod+SETS+%3D+RESULT)+of+it%2C+name+of+it)+of+properties+of+it)+of+it%2C+name+of+it%2C+id+of+it%2C+name+of+site+of+it)+of+bes+analysis+whose+((id+of+it+is+ANALYSISID)+AND+(name+of+site+of+it+is+%22SITENAME%22))'.replace("SETS", opt_sets).replace("ANALYSISID",opt_analysis_id).replace("SITENAME",opt_analysis_site_name)
+    query='(%22analysis_id%3D%22+%26+item+2+of+it+as+string%2C+%22analysis_name%3D%22+%26+item+1+of+it%2C+%22property_name%3D%22+%26+item+1+of+item+0+of+it%2C%22property_value%3D%22+%26+item+0+of+item+0+of+item+0+of+it%2C+%22nt_host%3D%22+%26+item+1+of+item+0+of+item+0+of+it%2C+%22client_id%3D%22+%26+item+2+of+item+0+of+item+0+of+it+as+string%2C+%22site_name%3D%22+%26+item+3+of+it)+of+((((values+of+it%2C+names+of+computer+of+it%2C+id+of+computer+of+it)+of+results+whose+(id+of+computer of+it+mod+SETS+%3D+RESULT)+of+it%2C+name+of+it)+of+properties+of+it)+of+it%2C+name+of+it%2C+id+of+it%2C+name+of+site+of+it)+of+bes+analysis+whose+((id+of+it+is+ANALYSISID)+AND+(name+of+site+of+it+is+%22SITENAME%22))'.replace("SETS", opt_sets).replace("ANALYSISID",opt_analysis_id).replace("SITENAME",opt_analysis_site_name)
 
     urlb=opt_url_start + query
 

bin/input_module_bigfix_analysis.py

@@ -1,7 +1,7 @@
 # this file is generated by add-on builder automatically
 # please do not edit it
 [base]
-builder_version = 4.0.0
+builder_version = 4.1.0
 builder_build = 0
 is_edited = 1
 

default/addon_builder.conf

@@ -3,11 +3,11 @@
 state_change_requires_restart = false
 is_configured = 0
 state = enabled
-build = 2
+build = 3
 
 [launcher]
 author = Jimmy Maple
-version = 3.0.3
+version = 3.0.4
 description = Technical add-on for ingesting data from HCL BigFix into Splunk
 
 [ui]

default/app.conf

@@ -3,4 +3,4 @@
 <view name="configuration"/>
 <view name="assets" label="Asset List"/>
 <view name="search" label="Search"/>
-</nav>
+</nav>