{"action":"created","issue":{"url":"https://api.github.com/repos/certsocietegenerale/FIR/issues/95","repository_url":"https://api.github.com/repos/certsocietegenerale/FIR","labels_url":"https://api.github.com/repos/certsocietegenerale/FIR/issues/95/labels{/name}","comments_url":"https://api.github.com/repos/certsocietegenerale/FIR/issues/95/comments","events_url":"https://api.github.com/repos/certsocietegenerale/FIR/issues/95/events","html_url":"https://github.com/certsocietegenerale/FIR/issues/95","id":145366723,"number":95,"title":"Add the abiity to search for the user who opened the event","user":{"login":"er587","id":17064938,"avatar_url":"https://avatars.githubusercontent.com/u/17064938?v=3","gravatar_id":"","url":"https://api.github.com/users/er587","html_url":"https://github.com/er587","followers_url":"https://api.github.com/users/er587/followers","following_url":"https://api.github.com/users/er587/following{/other_user}","gists_url":"https://api.github.com/users/er587/gists{/gist_id}","starred_url":"https://api.github.com/users/er587/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/er587/subscriptions","organizations_url":"https://api.github.com/users/er587/orgs","repos_url":"https://api.github.com/users/er587/repos","events_url":"https://api.github.com/users/er587/events{/privacy}","received_events_url":"https://api.github.com/users/er587/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-04-02T12:06:32Z","updated_at":"2016-04-02T12:59:15Z","closed_at":null,"body":"suggest adding the ability to search for the team member who has opened the ticket. \r\n\r\nWe use this tool in a tier based security operations team model. The level 1 analyst will open event, investigate, then escalate the incidents to the \"incident leader\". \r\n\r\nConsider adding the following to the incidents/views.py\r\n```\r\nopened_by = re.search(\"lvl1:(\\S+)\", query_string)\r\n        if opened_by:\r\n            q = q & Q(opened_by__username=opened_by.group(1))\r\n            query_string = query_string.replace('lvl1:'+opened_by.group(1), '')\r\n```\r\nGreat tool by the way! Thank you"},"comment":{"url":"https://api.github.com/repos/certsocietegenerale/FIR/issues/comments/204712208","html_url":"https://github.com/certsocietegenerale/FIR/issues/95#issuecomment-204712208","issue_url":"https://api.github.com/repos/certsocietegenerale/FIR/issues/95","id":204712208,"user":{"login":"gaelmuller","id":35897,"avatar_url":"https://avatars.githubusercontent.com/u/35897?v=3","gravatar_id":"","url":"https://api.github.com/users/gaelmuller","html_url":"https://github.com/gaelmuller","followers_url":"https://api.github.com/users/gaelmuller/followers","following_url":"https://api.github.com/users/gaelmuller/following{/other_user}","gists_url":"https://api.github.com/users/gaelmuller/gists{/gist_id}","starred_url":"https://api.github.com/users/gaelmuller/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gaelmuller/subscriptions","organizations_url":"https://api.github.com/users/gaelmuller/orgs","repos_url":"https://api.github.com/users/gaelmuller/repos","events_url":"https://api.github.com/users/gaelmuller/events{/privacy}","received_events_url":"https://api.github.com/users/gaelmuller/received_events","type":"User","site_admin":false},"created_at":"2016-04-02T12:59:15Z","updated_at":"2016-04-02T12:59:15Z","body":"This seems like a good change. We won't be using the search keyword 'lvl1' though, as it is too specific to your case. But keyword 'opened_by' would be fine.\r\n\r\nDo you want to submit a Pull Request with this change ? If not, we will probably make this change ourselves."}}