Merge pull request #11654 from nitsan-tzur/epm-arrival-time

Use arrivalTime to avoid missing events
Azure · Jan 23, 2025 · ea9349d · ea9349d
2 parents cba0d00 + 10c866f
commit ea9349d
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 1 deletion.
diff --git a/Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConn.zip b/Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConn.zip
diff --git a/Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConnector/__init__.py b/Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConnector/__init__.py
@@ -149,7 +149,7 @@ def main(mytimer: func.TimerRequest) -> None:
     except Exception as err:
         logging.error("CyberArkEPMServerURL is invalid")
         return
-    filter_date = '{"filter": "eventDate GE ' + str(start_time) + ' AND eventDate LE ' + end_time + '"}'
+    filter_date = '{"filter": "arrivalTime GE ' + str(start_time) + ' AND arrivalTime LE ' + end_time + '"}'
     aggregated_events = []
     raw_events = []
     aggregated_policy_audits = []

diff --git a/Solutions/CyberArkEPM/ReleaseNotes.md b/Solutions/CyberArkEPM/ReleaseNotes.md
@@ -1,3 +1,4 @@
 | **Version** | **Date Modified (DD-MM-YYYY)** | **Change History**                             |
 |-------------|--------------------------------|------------------------------------------------|
 | 3.0.0       | 27-07-2023                     | Updated solution to fix deployment validations | 
+