From 12b4dfc29ba9dff29aa4050850cf96eb69ed5d47 Mon Sep 17 00:00:00 2001 From: Siddharth Date: Fri, 6 Dec 2024 17:02:49 +0530 Subject: [PATCH] Upgrade CIM to 6.0.0 --- pytest_splunk_addon/data_models/Authentication.json | 5 +++++ pytest_splunk_addon/data_models/Intrusion_Detection.json | 2 +- pytest_splunk_addon/data_models/Network_Traffic.json | 2 +- pytest_splunk_addon/data_models/Performance.json | 2 +- 4 files changed, 8 insertions(+), 3 deletions(-) diff --git a/pytest_splunk_addon/data_models/Authentication.json b/pytest_splunk_addon/data_models/Authentication.json index 0af740237..c516ade74 100644 --- a/pytest_splunk_addon/data_models/Authentication.json +++ b/pytest_splunk_addon/data_models/Authentication.json @@ -70,6 +70,11 @@ "validity": "if(isnum(response_time) and response_time>0 AND response_time<3600,response_time,null())", "comment": "The amount of time it took to receive a response in the authentication event, in seconds." }, + { + "name": "session_id", + "type": "optional", + "comment": "The unique identifier assigned to the login session." + }, { "name": "signature", "type": "optional", diff --git a/pytest_splunk_addon/data_models/Intrusion_Detection.json b/pytest_splunk_addon/data_models/Intrusion_Detection.json index 8e720fc47..077c3e3b0 100644 --- a/pytest_splunk_addon/data_models/Intrusion_Detection.json +++ b/pytest_splunk_addon/data_models/Intrusion_Detection.json @@ -74,7 +74,7 @@ { "name": "signature", "type": "required", - "comment": "The name of the intrusion detected on the client (the src), such as PlugAndPlay_BO and JavaScript_Obfuscation_Fre. This is a string value. Use a signature_id field (not included in this data model) for numeric indicators." + "comment": "The name of the intrusion detected on the client (the src), such as PlugAndPlay_BO and JavaScript_Obfuscation_Fre." }, { "name": "signature_id", diff --git a/pytest_splunk_addon/data_models/Network_Traffic.json b/pytest_splunk_addon/data_models/Network_Traffic.json index 739370a5f..f3f7de02a 100644 --- a/pytest_splunk_addon/data_models/Network_Traffic.json +++ b/pytest_splunk_addon/data_models/Network_Traffic.json @@ -187,7 +187,7 @@ "type": "conditional", "condition": "protocol=ip", "expected_values": ["ipv4", "ipv6"], - "comment": "Version of the OSI layer 3 protocol." + "comment": "Version of the OSI layer 3 protocol, in lower case." }, { "name": "response_time", diff --git a/pytest_splunk_addon/data_models/Performance.json b/pytest_splunk_addon/data_models/Performance.json index b96c2a26e..7788967f5 100644 --- a/pytest_splunk_addon/data_models/Performance.json +++ b/pytest_splunk_addon/data_models/Performance.json @@ -78,7 +78,7 @@ { "name": "power", "type": "optional", - "comment": "Amount of power consumed by the facilities resource, in Kw\/h." + "comment": "Amount of power consumed by the facilities resource, in kW." }, { "name": "fan_speed",