v4.3.3
The action.correlationsearch.metadata
field was updated to include an additional value called publish_date
, a timestamp float representing when a detection was published.
Additionally, some cleanup was done around testing and the test_results/summary.yml was improved significantly to support better test results/tracking.
Finally, if searches use Baselines but have not been marked manual_test, they will throw runtime Exceptions during testing until Baselines are officially supported in the testing workflow.
What's Changed
- add publish_date field by @pyth0n1c in #239
- Responses to Comments by @pyth0n1c in #260
- Expanding coverage and other metrics in summary.yml by @cmcginley-splunk in #257
Full Changelog: v4.3.2...v4.3.3