From 6311b1fc2ada3524595f0c372db658fe8c699e0f Mon Sep 17 00:00:00 2001 From: GasPar-Sec <117324353+GasPar-Sec@users.noreply.github.com> Date: Wed, 6 Aug 2025 12:29:49 -0400 Subject: [PATCH 1/2] Update to add SPLUNK_GENERALTERMS env. variable Add an environnemnt variable called SPLUNK_GENERALTERMS to docker run. --- .../infrastructures/DetectionTestingInfrastructureContainer.py | 1 + 1 file changed, 1 insertion(+) diff --git a/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py b/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py index d0a3318f..30033937 100644 --- a/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py +++ b/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py @@ -90,6 +90,7 @@ def make_container(self) -> docker.models.resource.Model: ] environment = {} + environment["SPLUNK_GENERALTERMS"] = "--accept-sgt-current-at-splunk-com" environment["SPLUNK_START_ARGS"] = "--accept-license" environment["SPLUNK_PASSWORD"] = self.infrastructure.splunk_app_password # Files have already been staged by the time that we call this. Files must only be staged From 490e00af3ef64560196c6478e609d0ddb1d53e21 Mon Sep 17 00:00:00 2001 From: GasPar-Sec <117324353+GasPar-Sec@users.noreply.github.com> Date: Mon, 11 Aug 2025 10:25:39 -0400 Subject: [PATCH 2/2] Fix Typo Fix Missing _ --- .../infrastructures/DetectionTestingInfrastructureContainer.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py b/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py index 30033937..19a77f81 100644 --- a/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py +++ b/contentctl/actions/detection_testing/infrastructures/DetectionTestingInfrastructureContainer.py @@ -90,7 +90,7 @@ def make_container(self) -> docker.models.resource.Model: ] environment = {} - environment["SPLUNK_GENERALTERMS"] = "--accept-sgt-current-at-splunk-com" + environment["SPLUNK_GENERAL_TERMS"] = "--accept-sgt-current-at-splunk-com" environment["SPLUNK_START_ARGS"] = "--accept-license" environment["SPLUNK_PASSWORD"] = self.infrastructure.splunk_app_password # Files have already been staged by the time that we call this. Files must only be staged