Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update docstring
  • Loading branch information
xqi-splunk committed Jul 8, 2025
commit 52089310b8b2bed1b6d0d5d6515328f825da9562
7 changes: 7 additions & 0 deletions contentctl/objects/correlation_search.py
Original file line number Diff line number Diff line change
Expand Up @@ -923,6 +923,8 @@ def validate_ara_events(self) -> None:
"""
Validate the risk and notable events created by the saved search.
An exception is raised if the validation fails for either risk or notable events.

:raises ValidationFailed: If the expected risk events are not found or validation fails.
"""
# Validate risk events
if self.has_risk_analysis_action:
Expand Down Expand Up @@ -967,6 +969,11 @@ def dispatch_and_validate(self, elapsed_sleep_time: dict[str, int]) -> None:

Dispatches the saved search and validates the risk/notable events created by it. If any
validation fails, raises a ValidationFailed exception.

:param elapsed_sleep_time: Dictionary tracking the total elapsed sleep time across retries.
:type elapsed_sleep_time: dict[str, int]

:raises ValidationFailed: If validation of risk/notable events fails after all retries.
"""
self.dispatch()

Expand Down