Use arrivalTime to avoid missing events

Azure · Jan 10, 2025 · 0f47b53 · 0f47b53
1 parent 6e21d25
commit 0f47b53
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConnector/__init__.py b/Solutions/CyberArkEPM/DataConnectors/CyberArkEPMSentinelConnector/__init__.py
@@ -149,7 +149,7 @@ def main(mytimer: func.TimerRequest) -> None:
     except Exception as err:
         logging.error("CyberArkEPMServerURL is invalid")
         return
-    filter_date = '{"filter": "eventDate GE ' + str(start_time) + ' AND eventDate LE ' + end_time + '"}'
+    filter_date = '{"filter": "arrivalTime GE ' + str(start_time) + ' AND arrivalTime LE ' + end_time + '"}'
     aggregated_events = []
     raw_events = []
     aggregated_policy_audits = []