Skip to content

Commit

Permalink
Merge pull request #897 from manwefm/fix_issue896
Browse files Browse the repository at this point in the history
FIX issue #896
  • Loading branch information
dadokkio authored Nov 13, 2020
2 parents 3a7dbfc + c0c7cda commit a5693d6
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion analyzers/Splunk/splunk.py
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
#!/usr/bin/env python3
# encoding: utf-8


import splunklib.client as client
from time import sleep
from cortexutils.analyzer import Analyzer
Expand Down Expand Up @@ -138,7 +139,7 @@ def SplunkSearch(self, **kwargs_savedsearch):


if jobResult["resultCount"] > self.MAX_COUNT:
jobResult["note"] = "Only the first "+str(self.MAX_COUNT)+" results were recovered over "+jobResult["resultCount"]+" to avoid any trouble on TheHive/Cortex. This parameter (max_count) can be changed in the analyzer configuration."
jobResult["note"] = "Only the first {} results were recovered over {} to avoid any trouble on TheHive/Cortex. This parameter (max_count) can be changed in the analyzer configuration.".format(self.MAX_COUNT, jobResult["resultCount"])

jobResult["search"] = job_infos["search"]
jobResult["savedsearch"] = saved_search
Expand Down

0 comments on commit a5693d6

Please sign in to comment.