arcsight-unofficial/arcsight-logger-api-sdk

arcsight-logger-api-sdk's Issues

TypeError: Object of type datetime is not JSON serializable

Hi,

When ever I attempt to drill down or set some form of time parameter I keep getting the following error:
TypeError: Object of type datetime is not JSON serializable
I'm currently using python3. @P1llus

Thanks

Run distributed search

Hi!

First of all, thanks for creating this SDK, I do think that is really useful.

Actually this is not an issue but question about the usage of the search function, this is its definition:

def search(host, authtoken, query, search_id, **kwargs):
    """Start a background search job.

    Args:
        host (string): Hostname of Logger
        authtoken (string): Token for the current session
        query (string): Which query to run
        search_id (int): The search_id to be generated for the search
        **kwargs: All arguments marked as optional in documentation

    Returns:
        json: If successful returns a sessionId, this ID is only
        related if you want to find the running search
        on the ArcSight Logger web interface. This is not related
        to the search_id provided by the user.

    """
    url = '/server/search'

    payload = {
        'search_session_id': search_id,
        'user_session_id': authtoken,
        'query': query,
        **kwargs
    }
    response = post(host, url, data=payload)

From what I can see, you can submit the optional params as keyword args, which is great,
However, I'm not able to set the local_search parameter properly, For instance:

distributed_search = "'local_search':false"
loggersdk.search(HOST, authtoken, CHART_QUERY, SEARCH_ID, distributed_search)

No matter what I do, always the search is run locally. Do you know how can I set the params properly on these kind of functions?

Thanks in advance,

Karl.