Modified parsing rule - Workday (demisto#36766)

* Modified parsing rule * Added release note
SEKOIA-IO · Oct 21, 2024 · 76adb56 · 76adb56
1 parent ffa930c
commit 76adb56
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/Packs/Workday/ParsingRules/WorkdayParsingRules/WorkdayParsingRules.xif b/Packs/Workday/ParsingRules/WorkdayParsingRules/WorkdayParsingRules.xif
@@ -1,4 +1,4 @@
 [INGEST:vendor="workday", product="workday", target_dataset="workday_activity_raw", no_hit = keep]
 // Support only date time of format: YYYY-MM-DDTHH:MM:SS.E3S%z. For example: "2023-07-15T07:00:00.000Z"
 filter to_string(requestTime) ~= "\d{4}\-\d{2}\-\d{2}T\d{2}\:\d{2}\:\d{2}\.\d{3}Z"
-| alter _time = requestTime;
+| alter _time = parse_timestamp("%FT%R:%E*SZ", requestTime);
diff --git a/Packs/Workday/ReleaseNotes/1_4_12.md b/Packs/Workday/ReleaseNotes/1_4_12.md
@@ -0,0 +1,3 @@
+#### Parsing Rules
+##### Workday Parsing Rule
+Improved implementation of _time parsing.
diff --git a/Packs/Workday/pack_metadata.json b/Packs/Workday/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Workday",
     "description": "Workday offers enterprise-level software solutions for financial management, human resources, and planning.",
     "support": "xsoar",
-    "currentVersion": "1.4.11",
+    "currentVersion": "1.4.12",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",