diff --git a/contentctl/output/templates/savedsearches_detections.j2 b/contentctl/output/templates/savedsearches_detections.j2 index 92db3833..1ddda9ac 100644 --- a/contentctl/output/templates/savedsearches_detections.j2 +++ b/contentctl/output/templates/savedsearches_detections.j2 @@ -57,15 +57,7 @@ cron_schedule = {{ detection.deployment.scheduling.cron_schedule }} dispatch.earliest_time = {{ detection.deployment.scheduling.earliest_time }} dispatch.latest_time = {{ detection.deployment.scheduling.latest_time }} action.correlationsearch.enabled = 1 -{% if detection.status == "deprecated" %} -action.correlationsearch.label = {{APP_NAME}} - Deprecated - {{ detection.name }} - Rule -{% elif detection.status == "experimental" %} -action.correlationsearch.label = {{APP_NAME}} - Experimental - {{ detection.name }} - Rule -{% elif detection.type | lower == "correlation" %} -action.correlationsearch.label = {{APP_NAME}} - RIR - {{ detection.name }} - Rule -{% else %} action.correlationsearch.label = {{APP_NAME}} - {{ detection.name }} - Rule -{% endif %} action.correlationsearch.annotations = {{ detection.annotations | tojson }} action.correlationsearch.metadata = {{ detection.getMetadata() | tojson }} {% if detection.deployment.scheduling.schedule_window is defined %} diff --git a/pyproject.toml b/pyproject.toml index fe7632ef..fe0ea388 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "contentctl" -version = "4.2.1" +version = "4.2.2" description = "Splunk Content Control Tool" authors = ["STRT "] license = "Apache 2.0"