Merge pull request #1120 from SEKOIA-IO/fix/SophosEventLagMetrics

Sophos: fix computation of the event lag
SEKOIA-IO · Oct 8, 2024 · bd25c00 · bd25c00
2 parents 751a5d5 + bd43109
commit bd25c00
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 2 deletions.
diff --git a/Sophos/CHANGELOG.md b/Sophos/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## 2024-10-08 - 1.17.1
+
+### Fixed
+
+- Update the event lag when no events are retrieved from the API
+
 ## 2024-10-02 - 1.17.0
 
 ### Added

diff --git a/Sophos/manifest.json b/Sophos/manifest.json
@@ -38,8 +38,8 @@
   "name": "Sophos",
   "uuid": "0de5216e-19b0-4ad3-9b91-a547cfaf52ca",
   "slug": "sophos",
-  "version": "1.17.0",
+  "version": "1.17.1",
   "categories": [
     "Endpoint"
   ]
-}
+}
diff --git a/Sophos/sophos_module/trigger_sophos_xdr_query.py b/Sophos/sophos_module/trigger_sophos_xdr_query.py
@@ -212,6 +212,7 @@ def getting_results(self, pagination: int) -> None:
 
             else:
                 self.log(message="No messages to forward", level="info")
+                EVENTS_LAG.labels(intake_key=self.configuration.intake_key).set(0)
 
 
 class SophosXDRIOCQuery(SophosXDRQueryTrigger):
-Original file line number
+Diff line change
@@ Expand Up / @@ -212,6 +212,7 @@ def getting_results(self, pagination: int) -> None: @@
                 else:
                     self.log(message="No messages to forward", level="info")
+                    EVENTS_LAG.labels(intake_key=self.configuration.intake_key).set(0)
     class SophosXDRIOCQuery(SophosXDRQueryTrigger):
@@ Expand Down @@