Skip to content

Releases: gjanders/SplunkVersionControl

1.2.11

17 Apr 23:57
Compare
Choose a tag to compare

Library updates:

  • Updated Splunk python SDK to 2.0.1

1.2.10

29 Jun 10:09
Compare
Choose a tag to compare

Updates:

  • Disabled urllib3 warnings
  • Added timeout=0 on SplunkVersionControl ChangeDetector Directory savedsearch
  • Added some minor comments about /services/properties/savedsearches/default (no changes in this version)
  • Updated various internal calls to use sslVerify setting. Hopefully nothing will break but this will result in more SSL verification in various parts of the code

Library updates:

  • Updated Splunk python SDK to 1.7.3

1.2.9

22 Sep 10:16
Compare
Choose a tag to compare

New features:

  • Added wildcard support for restores, so restore a savedsearch of Test* will now restore any savedsearch starting with Test, wildcards can be used on any knowledge object
  • Created a new file called test_git.py

Updates:

  • Re-factored splunkversioncontrol_restore_class.py
  • Added more debug logging in case something does fail on restoration
  • Updated the savedsearches for the _audit index query to look for info=completed as well as info=granted, as this does not appear in Splunk 9
  • Added more time for the _audit log entry to appear, previously it would appear on the same second the dashboard was run, now there is an approx 10 second delay

Library updates:

  • Updated Splunk python SDK to 1.7.2

1.2.8

14 Jun 23:54
Compare
Choose a tag to compare

README.md update
Updated to Splunk python SDK 1.6.20

1.2.7

06 Feb 02:52
Compare
Choose a tag to compare

Updated Splunk python SDK to 1.6.18

Corrected an issue where a DELETE combined with other operations could cause a stacktrace if using the run_ko_diff option

1.2.6

07 Nov 04:23
Compare
Choose a tag to compare

Updates to:
splunkversioncontrol_backup_class.py

To correct an issue with recording the git_location of file changes in more cases

1.2.5

08 Sep 07:46
Compare
Choose a tag to compare

Updates to:
splunkversioncontrol_backup_class.py

splunkversioncontrol_restore_class.py

To remove passwords in more cases

Updates to dashboards:
splunkversioncontrol_restore.xml

splunkversioncontrol_restore_dynamic.xml

To provide a drop down list of available knowledge objects in addition to the text field option

Updated reports:
SplunkVersionControl CheckAdmin - simplified to use the Splunk users list

splunk_vc_kom_audit_summary - updated to ignore the manager URI's and handle proxied REST calls from the KOM report

1.2.4

17 Aug 22:20
Compare
Choose a tag to compare

Updated splunk_vc_kom_audit_summary report

Added i=StanzaName to the indexed data when running the audit query

Now attempting to hide (most) passwords from the logs by default (for example when an OS error occurs don't print the stdout including the password in use)

git diff now uses --no-pager to prevent trucation of the diff command with -U0 (no context)

New options:
disable_file_deletion - do not delete files in remote git repo that are not found during backup, useful for testing

use_wdiff - sends the output of the diff command to Unix command wdiff to provide a nicer diff output

Updated report:
SplunkVersionControl ChangeDetector Non-Directory now excludes the CIM Risk and Incident_Management datamodels as they update very frequently with close to zero changes (calculationId changes only)

1.2.3

27 Jul 02:58
Compare
Choose a tag to compare

New option disable_git_ssl_verify

Support for password: syntax for the gitRepoURL parameter when using http/https

Bugfix for proxy code to work with git & HTTP proxies

1.2.2

02 Jul 01:30
Compare
Choose a tag to compare

This version includes a few changes, these include two new parameters on the version control backup:
run_ko_query - if enabled this runs a Splunk savedsearch and adds the additional information of tag=git_tag_name into the output of the modular input which is then indexed
run_ko_diff - if enabled in combination with run_ko_query this additionally adds a diff=git_difference_result from comparing the new version with HEAD~1

To run the query the macro splunk_vc_ko_query, should be configured to point to an appname:searchname, the default is splunk_kom:splunk_vc_kom_audit_summary
If you have the Knowledge Object Overview App for Splunk (https://splunkbase.splunk.com/app/5399/) installed then there is a savedsearch called splunk_vc_kom_audit_summary which can be moved or copied into the splunk_kom app for this new functionality to work as expected

In addition the field qualifiedSearch is now longer backed up for savedsearches

Boolean tickboxes are now used for options that should be true or false

Also attempted to improve the error logging for failed OS process execution

Fixed a few misc bugs related to setting email address/name in the git repo among others