V1.2.3 release (#10)

Author: blotus

CHANGELOG.md

@@ -10,9 +10,17 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 The [public API](https://semver.org/spec/v2.0.0.html#spec-item-1) of this library consists of all code related to the
 Splunk app: i.e., all files and folders except ones that are ignored by the `.slimignore` file.
 
-
 ---
 
+## [1.2.3](https://github.com/crowdsecurity/crowdsec-splunk-app/releases/tag/v1.2.3) - 2025-11-25
+
+[_Compare with previous release_](https://github.com/crowdsecurity/crowdsec-splunk-app/compare/v1.2.2...v1.2.3)
+
+### Changed
+
+- Fix fields not being present in the records if the first match was an unknown IP or without an IP field
+- Force app to run on the search head.
+
 ## [1.2.2](https://github.com/crowdsecurity/crowdsec-splunk-app/releases/tag/v1.2.2) - 2025-11-17
 
 [_Compare with previous release_](https://github.com/crowdsecurity/crowdsec-splunk-app/compare/v1.2.1...v1.2.2)
@@ -33,7 +41,6 @@ Splunk app: i.e., all files and folders except ones that are ignored by the `.sl
 
 [_Compare with previous release_](https://github.com/crowdsecurity/crowdsec-splunk-app/compare/v1.2.0...v1.2.1)
 
-
 ### Fixed
 
 - Make API key editable in the UI
@@ -50,7 +57,7 @@ Splunk app: i.e., all files and folders except ones that are ignored by the `.sl
 
 ### Fixed
 
-- Fix typo for `aggressiveness` fields 
+- Fix typo for `aggressiveness` fields
 
 ---
 

Makefile

@@ -1,5 +1,5 @@
 PYTHON=python3.9
-SDK_VERSION=2.1.0
+SDK_VERSION=2.1.1
 TARGET_DIR=bin/splunklib
 TMP_DIR=/tmp/splunk-sdk
 

app.manifest

@@ -5,7 +5,7 @@
     "id": {
       "group": null,
       "name": "crowdsec-splunk-app",
-      "version": "1.2.2"
+      "version": "1.2.3"
     },
     "author": [
       {

appserver/static/javascript/setup_page.js

@@ -3,21 +3,16 @@
 var app_name = "./crowdsec-splunk-app";
 
 require.config({
-    paths: {
-        myApp: "../app/" + app_name + "/javascript/views/app",
-        react: "../app/" + app_name + "/javascript/vendor/react.production.min",
-        ReactDOM: "../app/" + app_name + "/javascript/vendor/react-dom.production.min",
-    },
-    scriptType: "module",
-    urlArgs: "v=v1.2.2"
+  paths: {
+    myApp: "../app/" + app_name + "/javascript/views/app",
+    react: "../app/" + app_name + "/javascript/vendor/react.production.min",
+    ReactDOM:
+      "../app/" + app_name + "/javascript/vendor/react-dom.production.min",
+  },
+  scriptType: "module",
+  urlArgs: "v=v1.2.3",
 });
 
-require([
-    "react",
-    "ReactDOM",
-    "myApp",
-], function (react, ReactDOM, myApp) {
-    ReactDOM.render(myApp, document.getElementById('main_container'));
-})
-
-;
+require(["react", "ReactDOM", "myApp"], function (react, ReactDOM, myApp) {
+  ReactDOM.render(myApp, document.getElementById("main_container"));
+});

bin/cssmoke.py

@@ -124,7 +124,7 @@ def stream(self, records):
         headers = {
             "x-api-key": api_key,
             "Accept": "application/json",
-            "User-Agent": "crowdSec-splunk-app/v1.0.0",
+            "User-Agent": "crowdSec-splunk-app/v1.2.3",
         }
 
         allowed_fields = None

bin/splunklib/__init__.py

@@ -16,19 +16,21 @@
 
 import logging
 
-DEFAULT_LOG_FORMAT = '%(asctime)s, Level=%(levelname)s, Pid=%(process)s, Logger=%(name)s, File=%(filename)s, ' \
-                     'Line=%(lineno)s, %(message)s'
-DEFAULT_DATE_FORMAT = '%Y-%m-%d %H:%M:%S %Z'
+DEFAULT_LOG_FORMAT = (
+    "%(asctime)s, Level=%(levelname)s, Pid=%(process)s, Logger=%(name)s, File=%(filename)s, "
+    "Line=%(lineno)s, %(message)s"
+)
+DEFAULT_DATE_FORMAT = "%Y-%m-%d %H:%M:%S %Z"
 
 
 # To set the logging level of splunklib
 # ex. To enable debug logs, call this method with parameter 'logging.DEBUG'
 # default logging level is set to 'WARNING'
-def setup_logging(level, log_format=DEFAULT_LOG_FORMAT, date_format=DEFAULT_DATE_FORMAT):
-    logging.basicConfig(level=level,
-                        format=log_format,
-                        datefmt=date_format)
+def setup_logging(
+    level, log_format=DEFAULT_LOG_FORMAT, date_format=DEFAULT_DATE_FORMAT
+):
+    logging.basicConfig(level=level, format=log_format, datefmt=date_format)
 
 
-__version_info__ = (2, 1, 0)
+__version_info__ = (2, 1, 1)
 __version__ = ".".join(map(str, __version_info__))