content icon indicating copy to clipboard operation
content copied to clipboard

SplunkPy: fix duplicate incidents

Open ilappe opened this issue 1 month ago • 2 comments

Related Issues

fixes: https://jira-dc.paloaltonetworks.com/browse/XSUP-59028

Description

save ids from additional 1 hour to account for daylight saving time changes. to prevents duplicate incidents that may occur when the clock shifts.

ilappe avatar Nov 19 '25 12:11 ilappe

Coverage

Coverage Report
FileStmtsMissCoverMissing
Packs/SplunkPy/Integrations/SplunkPy
   SplunkPy.py169636978%170, 173, 258–259, 263–266, 268–269, 273–276, 299, 310, 389, 393–395, 429–431, 610, 612, 743–744, 752, 770, 876–877, 892–897, 918–919, 921–923, 925, 927, 1003–1008, 1010, 1014–1015, 1219–1220, 1300–1302, 1319–1320, 1355–1364, 1399–1400, 1402, 1420, 1467–1469, 1474–1475, 1481, 1484–1485, 1516–1517, 1525, 1587–1590, 1596–1598, 1602, 1642–1643, 1649–1651, 1653–1654, 1719, 1764, 1768, 1847–1849, 1854–1855, 1917, 1919–1921, 2024, 2071–2072, 2091, 2135–2137, 2139, 2168–2169, 2173, 2176, 2179–2187, 2194–2195, 2197–2199, 2233–2235, 2237, 2239–2240, 2242–2246, 2248–2250, 2252, 2260, 2262–2265, 2267–2275, 2277–2278, 2772, 2795–2797, 2802, 2804, 2806–2811, 2813, 2942, 2980, 2984, 2993, 3003, 3007, 3028, 3030, 3032, 3052, 3055, 3060–3065, 3067–3069, 3111, 3133, 3174, 3180, 3189, 3197, 3202, 3226–3227, 3266, 3277–3279, 3282–3283, 3285, 3295, 3320–3328, 3330, 3332–3335, 3337–3338, 3370–3375, 3385–3388, 3391–3394, 3407–3410, 3454, 3495, 3536, 3551, 3568, 3654–3656, 3678, 3687–3691, 3699–3700, 3705–3706, 3722–3726, 3729, 3731, 3737–3744, 3746–3747, 3749–3750, 3754–3762, 3764–3767, 3771–3772, 3775–3777, 3779, 3785–3793, 3798, 3804–3807, 3813–3816, 3820–3823, 3838, 3840–3841, 3843–3845, 3854, 3858–3865, 3872, 3889–3894, 3920–3927, 3931–3932, 3934–3939
TOTAL169636978% 

Tests Skipped Failures Errors Time
253 0 :zzz: 0 :x: 0 :fire: 4.161s :stopwatch:

github-actions[bot] avatar Nov 19 '25 12:11 github-actions[bot]

Validate summary The following errors were thrown as a part of this pr: . If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.

Verdict: PR can be force merged from validate perspective? ✅

content-bot avatar Nov 23 '25 10:11 content-bot