embulk-input-splunk 0.2.1 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 83626f940cf8546f4efce77990d9bc3d2cc4a7accc2e4c7d81eb512ee5d4b7a1
-  data.tar.gz: d2bbd85c9286e6f24b32f67332883c421091878dfa61b2163221ece6abde7f09
+  metadata.gz: 4d697bd85bfa307f151110ad69bd7387e271f0ce149c41dfabaf7158de78a5e4
+  data.tar.gz: f221d21bcc56be871a44b62d2518574a80a3c87220c0af5c5a372f4c43c9f2a7
 SHA512:
-  metadata.gz: 4b628c93a3417e01f4fae427225cc69e92cb9a96de7d1fb91ba7e93cfd1bba4d0b26b7b373bd7e269a5a7c91730d0409811dc5d27a5774dcccf3a193c37ab9b5
-  data.tar.gz: 062b9db314f9540c3617cb5adba8401a5677775f51ee55df4f86ac7b8450f8826445415942a08d369cdc17312e605d3fc31d18bebf6b34fbccef80d597ff9c8f
+  metadata.gz: 0214faee9cf0ad58131209b3dfd552cf34f3acb8de061a99ce5228ac8726841ee76af57589ebf6c41317f1ee983d7e9dc4aa74748591d0c92319f67928216ea9
+  data.tar.gz: 3f9a250f74ec47ad8727fc429595002fd1e8d9d2b8c74f730dce8268d23207767d77a9d386799b20bdb4215ee4d2ba43c2d19a627f6fe1b54cc9567ae5c1ac43

data/embulk-input-splunk.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name          = "embulk-input-splunk"
-  spec.version       = "0.2.1"
+  spec.version       = "0.2.2"
   spec.authors       = ["Scott Arbeitman"]
   spec.summary       = "Splunk input plugin for Embulk"
   spec.description   = "Loads records from a Splunk query."

data/lib/embulk/input/splunk.rb

@@ -74,9 +74,12 @@ module Embulk
       protected
     
       def build_query(query)
+        # sort 0 _ is required to remove the magic 10,000 result for the sort command.
+        # See: https://answers.splunk.com/answers/423870/why-are-search-results-cut-off-at-10000-in-splunk.html
+        
         %Q{
           #{query}
-          | sort #{SPLUNK_DEFAULT_TIME_FIELD}
+          | sort 0 #{SPLUNK_DEFAULT_TIME_FIELD}
           | table #{ @fields.join(", ") }
         }
       end 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: embulk-input-splunk
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.2
 platform: ruby
 authors:
 - Scott Arbeitman
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2018-02-22 00:00:00.000000000 Z
+date: 2018-02-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement