embulk-input-splunk 0.2.1 → 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 83626f940cf8546f4efce77990d9bc3d2cc4a7accc2e4c7d81eb512ee5d4b7a1
4
- data.tar.gz: d2bbd85c9286e6f24b32f67332883c421091878dfa61b2163221ece6abde7f09
3
+ metadata.gz: 4d697bd85bfa307f151110ad69bd7387e271f0ce149c41dfabaf7158de78a5e4
4
+ data.tar.gz: f221d21bcc56be871a44b62d2518574a80a3c87220c0af5c5a372f4c43c9f2a7
5
5
  SHA512:
6
- metadata.gz: 4b628c93a3417e01f4fae427225cc69e92cb9a96de7d1fb91ba7e93cfd1bba4d0b26b7b373bd7e269a5a7c91730d0409811dc5d27a5774dcccf3a193c37ab9b5
7
- data.tar.gz: 062b9db314f9540c3617cb5adba8401a5677775f51ee55df4f86ac7b8450f8826445415942a08d369cdc17312e605d3fc31d18bebf6b34fbccef80d597ff9c8f
6
+ metadata.gz: 0214faee9cf0ad58131209b3dfd552cf34f3acb8de061a99ce5228ac8726841ee76af57589ebf6c41317f1ee983d7e9dc4aa74748591d0c92319f67928216ea9
7
+ data.tar.gz: 3f9a250f74ec47ad8727fc429595002fd1e8d9d2b8c74f730dce8268d23207767d77a9d386799b20bdb4215ee4d2ba43c2d19a627f6fe1b54cc9567ae5c1ac43
@@ -1,6 +1,6 @@
1
1
  Gem::Specification.new do |spec|
2
2
  spec.name = "embulk-input-splunk"
3
- spec.version = "0.2.1"
3
+ spec.version = "0.2.2"
4
4
  spec.authors = ["Scott Arbeitman"]
5
5
  spec.summary = "Splunk input plugin for Embulk"
6
6
  spec.description = "Loads records from a Splunk query."
@@ -74,9 +74,12 @@ module Embulk
74
74
  protected
75
75
 
76
76
  def build_query(query)
77
+ # sort 0 _ is required to remove the magic 10,000 result for the sort command.
78
+ # See: https://answers.splunk.com/answers/423870/why-are-search-results-cut-off-at-10000-in-splunk.html
79
+
77
80
  %Q{
78
81
  #{query}
79
- | sort #{SPLUNK_DEFAULT_TIME_FIELD}
82
+ | sort 0 #{SPLUNK_DEFAULT_TIME_FIELD}
80
83
  | table #{ @fields.join(", ") }
81
84
  }
82
85
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: embulk-input-splunk
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.2.1
4
+ version: 0.2.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Scott Arbeitman
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-02-22 00:00:00.000000000 Z
11
+ date: 2018-02-23 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  requirement: !ruby/object:Gem::Requirement