1
- from datetime import datetime , timedelta
2
- from typing import List
1
+ import datetime
3
2
4
3
from sdcclient ._common import _SdcCommon
5
4
@@ -25,17 +24,17 @@ def list_events(self, from_date=None, to_date=None, scope_filter=None, limit=0,
25
24
List the events in the Activity Audit.
26
25
27
26
Args:
28
- from_date (datetime): the start of the time range from which to get events. The default value is yesterday.
29
- to_date (datetime): the end of the time range from which to get events. The default value is now.
27
+ from_date (datetime.datetime ): the start of the time range from which to get events. The default value is yesterday.
28
+ to_date (datetime.datetime ): the end of the time range from which to get events. The default value is now.
30
29
scope_filter (List): a list of Sysdig Monitor-like filter (e.g `processName in ("ubuntu")`).
31
30
limit (int): max number of events to retrieve. A limit of 0 or negative will retrieve all events.
32
31
data_sources (List): a list of data sources to retrieve events from. None or an empty list retrieves all events.
33
32
34
33
Examples:
35
34
>>> client = ActivityAuditClientV1(token=SECURE_TOKEN)
36
35
>>>
37
- >>> now = datetime.utcnow()
38
- >>> three_days_ago = now - timedelta(days=3)
36
+ >>> now = datetime.datetime. utcnow()
37
+ >>> three_days_ago = now - datetime. timedelta(days=3)
39
38
>>> max_event_number_retrieved = 50
40
39
>>> data_sources = [ActivityAuditDataSource.CMD, ActivityAuditDataSource.KUBE_EXEC]
41
40
>>>
@@ -50,9 +49,9 @@ def list_events(self, from_date=None, to_date=None, scope_filter=None, limit=0,
50
49
number_of_events_per_query = 50
51
50
52
51
if from_date is None :
53
- from_date = datetime .utcnow () - timedelta (days = 1 )
52
+ from_date = datetime .datetime . utcnow () - datetime . timedelta (days = 1 )
54
53
if to_date is None :
55
- to_date = datetime .utcnow ()
54
+ to_date = datetime .datetime . utcnow ()
56
55
57
56
filters = scope_filter if scope_filter else []
58
57
if data_sources :
0 commit comments