Skip to content

Commit b73d57c

Browse files
efd6efd6
authored
amazon_security_lake: tolerate non-ISO8601 in time_dt timestamps (#14799)
The Go arrow parquet parser serialises timestamps into a non-conformant format, 2006-01-02 15:04:05.999999999Z0700, resulting in date processor failure. This has been fixed upstream and will be available in a future version of the package. In the mean time, tolerate the format that they emit. Note that the long optional chain is required because the 9s fractional specification in the serialisation indicates that the marshaler will truncate trailing zero digits[1]. [1]https://pkg.go.dev/time
1 parent 1ff9d46 commit b73d57c

15 files changed

+2036
-1
lines changed

‎packages/amazon_security_lake/changelog.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "2.7.0"
3+
changes:
4+
- description: Tolerate non-ISO8601 formats in `time_dt`.
5+
type: enhancement
6+
link: https://github.com/elastic/integrations/pull/14799
27
- version: "2.6.1"
38
changes:
49
- description: Fix handling of invalid '-' IP values.

‎packages/amazon_security_lake/data_stream/event/_dev/test/pipeline/test-application-activity.log‎

Lines changed: 3 additions & 0 deletions
Large diffs are not rendered by default.

‎packages/amazon_security_lake/data_stream/event/_dev/test/pipeline/test-application-activity.log-expected.json‎

Lines changed: 1905 additions & 0 deletions
Large diffs are not rendered by default.

‎packages/amazon_security_lake/data_stream/event/elasticsearch/ingest_pipeline/default.yml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -484,6 +484,7 @@ processors:
484484
formats:
485485
- ISO8601
486486
- UNIX_MS
487+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
487488
if: ctx.ocsf?.end_time_dt != null && ctx.ocsf.end_time_dt != ''
488489
on_failure:
489490
- remove:
@@ -522,6 +523,7 @@ processors:
522523
formats:
523524
- ISO8601
524525
- UNIX_MS
526+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
525527
if: ctx.ocsf?.time_dt != null && ctx.ocsf.time_dt != ''
526528
on_failure:
527529
- remove:
@@ -550,6 +552,7 @@ processors:
550552
formats:
551553
- ISO8601
552554
- UNIX_MS
555+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
553556
if: ctx.ocsf?.time_dt != null && ctx.ocsf.time_dt != ''
554557
on_failure:
555558
- remove:
@@ -579,6 +582,7 @@ processors:
579582
formats:
580583
- ISO8601
581584
- UNIX_MS
585+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
582586
if: ctx.ocsf?.metadata?.logged_time_dt != null && ctx.ocsf.metadata.logged_time_dt != ''
583587
on_failure:
584588
- remove:
@@ -608,6 +612,7 @@ processors:
608612
formats:
609613
- ISO8601
610614
- UNIX_MS
615+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
611616
if: ctx.ocsf?.metadata?.modified_time_dt != null && ctx.ocsf.metadata.modified_time_dt != ''
612617
on_failure:
613618
- remove:
@@ -637,6 +642,7 @@ processors:
637642
formats:
638643
- ISO8601
639644
- UNIX_MS
645+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
640646
if: ctx.ocsf?.metadata?.processed_time_dt != null && ctx.ocsf.metadata.processed_time_dt != ''
641647
on_failure:
642648
- remove:
@@ -720,6 +726,7 @@ processors:
720726
formats:
721727
- ISO8601
722728
- UNIX_MS
729+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
723730
if: ctx.ocsf?.start_time_dt != null && ctx.ocsf.start_time_dt != ''
724731
on_failure:
725732
- remove:

‎packages/amazon_security_lake/data_stream/event/elasticsearch/ingest_pipeline/pipeline_category_findings.yml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,7 @@ processors:
4444
formats:
4545
- ISO8601
4646
- UNIX_MS
47+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
4748
if: ctx.ocsf?.finding?.created_time_dt != null && ctx.ocsf.finding.created_time_dt != ''
4849
on_failure:
4950
- remove:
@@ -73,6 +74,7 @@ processors:
7374
formats:
7475
- ISO8601
7576
- UNIX_MS
77+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
7678
if: ctx.ocsf?.finding?.created_time_dt != null && ctx.ocsf.finding.created_time_dt != ''
7779
on_failure:
7880
- remove:
@@ -102,6 +104,7 @@ processors:
102104
formats:
103105
- ISO8601
104106
- UNIX_MS
107+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
105108
if: ctx.ocsf?.finding?.first_seen_time_dt != null && ctx.ocsf.finding.first_seen_time_dt != ''
106109
on_failure:
107110
- remove:
@@ -131,6 +134,7 @@ processors:
131134
formats:
132135
- ISO8601
133136
- UNIX_MS
137+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
134138
if: ctx.ocsf?.finding?.last_seen_time_dt != null && ctx.ocsf.finding.last_seen_time_dt != ''
135139
on_failure:
136140
- remove:
@@ -160,6 +164,7 @@ processors:
160164
formats:
161165
- ISO8601
162166
- UNIX_MS
167+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
163168
if: ctx.ocsf?.finding?.modified_time_dt != null && ctx.ocsf.finding.modified_time_dt != ''
164169
on_failure:
165170
- remove:
@@ -381,6 +386,7 @@ processors:
381386
formats:
382387
- ISO8601
383388
- UNIX_MS
389+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
384390
on_failure:
385391
- remove:
386392
field: _ingest._value.cve.created_time_dt
@@ -412,6 +418,7 @@ processors:
412418
formats:
413419
- ISO8601
414420
- UNIX_MS
421+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
415422
on_failure:
416423
- remove:
417424
field: _ingest._value.cve.modified_time_dt

‎packages/amazon_security_lake/data_stream/event/elasticsearch/ingest_pipeline/pipeline_category_identity_and_access_management.yml‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,7 @@ processors:
9999
formats:
100100
- ISO8601
101101
- UNIX_MS
102+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
102103
if: ctx.ocsf?.certificate?.created_time_dt != null && ctx.ocsf.certificate.created_time_dt != ''
103104
on_failure:
104105
- remove:
@@ -128,6 +129,7 @@ processors:
128129
formats:
129130
- ISO8601
130131
- UNIX_MS
132+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
131133
if: ctx.ocsf?.certificate?.expiration_time_dt != null && ctx.ocsf.certificate.expiration_time_dt != ''
132134
on_failure:
133135
- remove:
@@ -185,6 +187,7 @@ processors:
185187
formats:
186188
- ISO8601
187189
- UNIX_MS
190+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
188191
if: ctx.ocsf?.logon_process?.file?.accessed_time_dt != null && ctx.ocsf.logon_process.file.accessed_time_dt != ''
189192
on_failure:
190193
- remove:
@@ -214,6 +217,7 @@ processors:
214217
formats:
215218
- ISO8601
216219
- UNIX_MS
220+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
217221
if: ctx.ocsf?.logon_process?.file?.created_time_dt != null && ctx.ocsf.logon_process.file.created_time_dt != ''
218222
on_failure:
219223
- remove:
@@ -253,6 +257,7 @@ processors:
253257
formats:
254258
- ISO8601
255259
- UNIX_MS
260+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
256261
if: ctx.ocsf?.logon_process?.file?.modified_time_dt != null && ctx.ocsf.logon_process.file.modified_time_dt != ''
257262
on_failure:
258263
- remove:
@@ -306,6 +311,7 @@ processors:
306311
formats:
307312
- ISO8601
308313
- UNIX_MS
314+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
309315
if: ctx.ocsf?.logon_process?.file?.signature?.certificate?.expiration_time_dt != null && ctx.ocsf.logon_process.file.signature.certificate.expiration_time_dt != ''
310316
on_failure:
311317
- remove:
@@ -335,6 +341,7 @@ processors:
335341
formats:
336342
- ISO8601
337343
- UNIX_MS
344+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
338345
if: ctx.ocsf?.logon_process?.terminated_time_dt != null && ctx.ocsf.logon_process.terminated_time_dt != ''
339346
on_failure:
340347
- remove:
@@ -381,6 +388,7 @@ processors:
381388
formats:
382389
- ISO8601
383390
- UNIX_MS
391+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
384392
if: ctx.ocsf?.logon_process?.created_time_dt != null && ctx.ocsf.logon_process.created_time_dt != ''
385393
on_failure:
386394
- remove:
@@ -577,6 +585,7 @@ processors:
577585
formats:
578586
- ISO8601
579587
- UNIX_MS
588+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
580589
if: ctx.ocsf?.logon_process?.file?.signature?.certificate?.created_time_dt != null && ctx.ocsf.logon_process.file.signature.certificate.created_time_dt != ''
581590
on_failure:
582591
- remove:
@@ -606,6 +615,7 @@ processors:
606615
formats:
607616
- ISO8601
608617
- UNIX_MS
618+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
609619
if: ctx.ocsf?.logon_process?.file?.signature?.created_time_dt != null && ctx.ocsf.logon_process.file.signature.created_time_dt != ''
610620
on_failure:
611621
- remove:
@@ -740,6 +750,7 @@ processors:
740750
formats:
741751
- ISO8601
742752
- UNIX_MS
753+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
743754
if: ctx.ocsf?.logon_process?.parent_process?.file?.accessed_time_dt != null && ctx.ocsf.logon_process.parent_process.file.accessed_time_dt != ''
744755
on_failure:
745756
- remove:
@@ -769,6 +780,7 @@ processors:
769780
formats:
770781
- ISO8601
771782
- UNIX_MS
783+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
772784
if: ctx.ocsf?.logon_process?.parent_process?.file?.created_time_dt != null && ctx.ocsf.logon_process.parent_process.file.created_time_dt != ''
773785
on_failure:
774786
- remove:
@@ -808,6 +820,7 @@ processors:
808820
formats:
809821
- ISO8601
810822
- UNIX_MS
823+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
811824
if: ctx.ocsf?.logon_process?.parent_process?.file?.modified_time_dt != null && ctx.ocsf.logon_process.parent_process.file.modified_time_dt != ''
812825
on_failure:
813826
- remove:
@@ -861,6 +874,7 @@ processors:
861874
formats:
862875
- ISO8601
863876
- UNIX_MS
877+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
864878
if: ctx.ocsf?.logon_process?.parent_process?.file?.signature?.certificate?.expiration_time_dt != null && ctx.ocsf.logon_process.parent_process.file.signature.certificate.expiration_time_dt != ''
865879
on_failure:
866880
- remove:
@@ -890,6 +904,7 @@ processors:
890904
formats:
891905
- ISO8601
892906
- UNIX_MS
907+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
893908
if: ctx.ocsf?.logon_process?.parent_process?.terminated_time_dt != null && ctx.ocsf.logon_process.parent_process.terminated_time_dt != ''
894909
on_failure:
895910
- remove:
@@ -936,6 +951,7 @@ processors:
936951
formats:
937952
- ISO8601
938953
- UNIX_MS
954+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
939955
if: ctx.ocsf?.logon_process?.parent_process?.created_time_dt != null && ctx.ocsf.logon_process.parent_process.created_time_dt != ''
940956
on_failure:
941957
- remove:
@@ -1132,6 +1148,7 @@ processors:
11321148
formats:
11331149
- ISO8601
11341150
- UNIX_MS
1151+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
11351152
if: ctx.ocsf?.logon_process?.parent_process?.file?.signature?.certificate?.created_time_dt != null && ctx.ocsf.logon_process.parent_process.file.signature.certificate.created_time_dt != ''
11361153
on_failure:
11371154
- remove:
@@ -1161,6 +1178,7 @@ processors:
11611178
formats:
11621179
- ISO8601
11631180
- UNIX_MS
1181+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
11641182
if: ctx.ocsf?.logon_process?.parent_process?.file?.signature?.created_time_dt != null && ctx.ocsf.logon_process.parent_process.file.signature.created_time_dt != ''
11651183
on_failure:
11661184
- remove:
@@ -1265,6 +1283,7 @@ processors:
12651283
formats:
12661284
- ISO8601
12671285
- UNIX_MS
1286+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
12681287
if: ctx.ocsf?.logon_process?.parent_process?.session?.created_time_dt != null && ctx.ocsf.logon_process.parent_process.session.created_time_dt != ''
12691288
on_failure:
12701289
- remove:
@@ -1294,6 +1313,7 @@ processors:
12941313
formats:
12951314
- ISO8601
12961315
- UNIX_MS
1316+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
12971317
if: ctx.ocsf?.logon_process?.parent_process?.session?.expiration_time_dt != null && ctx.ocsf.logon_process.parent_process.session.expiration_time_dt != ''
12981318
on_failure:
12991319
- remove:
@@ -1441,6 +1461,7 @@ processors:
14411461
formats:
14421462
- ISO8601
14431463
- UNIX_MS
1464+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
14441465
if: ctx.ocsf?.logon_process?.session?.created_time_dt != null && ctx.ocsf.logon_process.session.created_time_dt != ''
14451466
on_failure:
14461467
- remove:
@@ -1470,6 +1491,7 @@ processors:
14701491
formats:
14711492
- ISO8601
14721493
- UNIX_MS
1494+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
14731495
if: ctx.ocsf?.logon_process?.session?.expiration_time_dt != null && ctx.ocsf.logon_process.session.expiration_time_dt != ''
14741496
on_failure:
14751497
- remove:
@@ -1673,6 +1695,7 @@ processors:
16731695
formats:
16741696
- ISO8601
16751697
- UNIX_MS
1698+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
16761699
if: ctx.ocsf?.session?.created_time_dt != null && ctx.ocsf.session.created_time_dt != ''
16771700
on_failure:
16781701
- remove:
@@ -1702,6 +1725,7 @@ processors:
17021725
formats:
17031726
- ISO8601
17041727
- UNIX_MS
1728+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
17051729
if: ctx.ocsf?.session?.expiration_time_dt != null && ctx.ocsf.session.expiration_time_dt != ''
17061730
on_failure:
17071731
- remove:

‎packages/amazon_security_lake/data_stream/event/elasticsearch/ingest_pipeline/pipeline_category_network_activity.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -138,6 +138,7 @@ processors:
138138
formats:
139139
- ISO8601
140140
- UNIX_MS
141+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
141142
if: ctx.ocsf?.query_time_dt != null && ctx.ocsf.query_time_dt != ''
142143
on_failure:
143144
- remove:
@@ -177,6 +178,7 @@ processors:
177178
formats:
178179
- ISO8601
179180
- UNIX_MS
181+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
180182
if: ctx.ocsf?.response_time_dt != null && ctx.ocsf.response_time_dt != ''
181183
on_failure:
182184
- remove:
@@ -751,6 +753,7 @@ processors:
751753
formats:
752754
- ISO8601
753755
- UNIX_MS
756+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
754757
if: ctx.ocsf?.expiration_time_dt != null && ctx.ocsf.expiration_time_dt != ''
755758
on_failure:
756759
- remove:

‎packages/amazon_security_lake/data_stream/event/elasticsearch/ingest_pipeline/pipeline_category_system_activity.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -86,6 +86,7 @@ processors:
8686
formats:
8787
- ISO8601
8888
- UNIX_MS
89+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
8990
if: ctx.ocsf?.job?.created_time_dt != null && ctx.ocsf.job.created_time_dt != ''
9091
on_failure:
9192
- remove:
@@ -115,6 +116,7 @@ processors:
115116
formats:
116117
- ISO8601
117118
- UNIX_MS
119+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
118120
if: ctx.ocsf?.job?.last_run_time_dt != null && ctx.ocsf.job.last_run_time_dt != ''
119121
on_failure:
120122
- remove:
@@ -144,6 +146,7 @@ processors:
144146
formats:
145147
- ISO8601
146148
- UNIX_MS
149+
- yyyy-MM-dd HH:mm:ss[.SSSSSSSSS][.SSSSSSSS][.SSSSSSS][.SSSSSS][.SSSSS][.SSSS][.SSS][.SS][.S]X
147150
if: ctx.ocsf?.job?.next_run_time_dt != null && ctx.ocsf.job.next_run_time_dt != ''
148151
on_failure:
149152
- remove:

0 commit comments

Comments
 (0)