rapid7-insightidr 1.14.2: query a log set by name; Static widens UBA windows

Browse Source

query_log_set accepts log_set_name and resolves the id itself (exact name, or
the one set whose name contains it; otherwise refused with the existing
names): on a real run the model mangled a 36-character id it copied. Static
queries by name, retries a 0-event keyword search case-insensitively, takes
the 24 hours before a behaviour alert (they aggregate hours of activity), and
always looks for the user's other investigations.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015RhL2gy6Sx6Y3FEsyBE3mZ

...

This commit is contained in:

Guillaume BOURGEOIS

2026-10-11 22:32:16 +00:00

parent c3b15d1faf

commit 4bd468e671

4 changed files with 60 additions and 19 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

integrations/rapid7-insightidr/manifest.yaml

+4 -3

File diff suppressed because one or more lines are too long