Skip to content

Commit a46eed1

Browse files
feat: Upgrade CIM to 6.0.0 (#896)
Added changes based on CIM 6.0.0 and CIM 5.3.2 changes Added Session ID in Authentication Model: https://cd.splunkdev.com/EnterpriseSecurity/sa-commoninformationmodel/-/merge_requests/545 Signature field description change in Intrusion Detection Model: https://cd.splunkdev.com/EnterpriseSecurity/sa-commoninformationmodel/-/merge_requests/542 Protocol Version description change in Network Traffic Model: https://cd.splunkdev.com/EnterpriseSecurity/sa-commoninformationmodel/-/merge_requests/544 Power field description change in Performance Model: https://cd.splunkdev.com/EnterpriseSecurity/sa-commoninformationmodel/-/merge_requests/543
1 parent c815a2a commit a46eed1

File tree

4 files changed

+8
-3
lines changed

4 files changed

+8
-3
lines changed

pytest_splunk_addon/data_models/Authentication.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,11 @@
7070
"validity": "if(isnum(response_time) and response_time>0 AND response_time<3600,response_time,null())",
7171
"comment": "The amount of time it took to receive a response in the authentication event, in seconds."
7272
},
73+
{
74+
"name": "session_id",
75+
"type": "optional",
76+
"comment": "The unique identifier assigned to the login session."
77+
},
7378
{
7479
"name": "signature",
7580
"type": "optional",

pytest_splunk_addon/data_models/Intrusion_Detection.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@
7474
{
7575
"name": "signature",
7676
"type": "required",
77-
"comment": "The name of the intrusion detected on the client (the src), such as PlugAndPlay_BO and JavaScript_Obfuscation_Fre. This is a string value. Use a signature_id field (not included in this data model) for numeric indicators."
77+
"comment": "The name of the intrusion detected on the client (the src), such as PlugAndPlay_BO and JavaScript_Obfuscation_Fre."
7878
},
7979
{
8080
"name": "signature_id",

pytest_splunk_addon/data_models/Network_Traffic.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,7 @@
187187
"type": "conditional",
188188
"condition": "protocol=ip",
189189
"expected_values": ["ipv4", "ipv6"],
190-
"comment": "Version of the OSI layer 3 protocol."
190+
"comment": "Version of the OSI layer 3 protocol, in lower case."
191191
},
192192
{
193193
"name": "response_time",

pytest_splunk_addon/data_models/Performance.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,7 @@
7878
{
7979
"name": "power",
8080
"type": "optional",
81-
"comment": "Amount of power consumed by the facilities resource, in Kw\/h."
81+
"comment": "Amount of power consumed by the facilities resource, in kW."
8282
},
8383
{
8484
"name": "fan_speed",

0 commit comments

Comments
 (0)