From 170509e12e20962948f74848dcc19927eda985ac Mon Sep 17 00:00:00 2001 From: pyth0n1c Date: Tue, 30 Jul 2024 09:48:34 -0700 Subject: [PATCH 1/2] make labels a bit shorter --- contentctl/output/templates/savedsearches_detections.j2 | 8 -------- 1 file changed, 8 deletions(-) diff --git a/contentctl/output/templates/savedsearches_detections.j2 b/contentctl/output/templates/savedsearches_detections.j2 index 92db3833..1ddda9ac 100644 --- a/contentctl/output/templates/savedsearches_detections.j2 +++ b/contentctl/output/templates/savedsearches_detections.j2 @@ -57,15 +57,7 @@ cron_schedule = {{ detection.deployment.scheduling.cron_schedule }} dispatch.earliest_time = {{ detection.deployment.scheduling.earliest_time }} dispatch.latest_time = {{ detection.deployment.scheduling.latest_time }} action.correlationsearch.enabled = 1 -{% if detection.status == "deprecated" %} -action.correlationsearch.label = {{APP_NAME}} - Deprecated - {{ detection.name }} - Rule -{% elif detection.status == "experimental" %} -action.correlationsearch.label = {{APP_NAME}} - Experimental - {{ detection.name }} - Rule -{% elif detection.type | lower == "correlation" %} -action.correlationsearch.label = {{APP_NAME}} - RIR - {{ detection.name }} - Rule -{% else %} action.correlationsearch.label = {{APP_NAME}} - {{ detection.name }} - Rule -{% endif %} action.correlationsearch.annotations = {{ detection.annotations | tojson }} action.correlationsearch.metadata = {{ detection.getMetadata() | tojson }} {% if detection.deployment.scheduling.schedule_window is defined %} From e081e5a1c9bfbbe0896622ab5d55f49387ad49e6 Mon Sep 17 00:00:00 2001 From: pyth0n1c Date: Tue, 30 Jul 2024 09:49:35 -0700 Subject: [PATCH 2/2] bump patch version in pyproject --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index fe7632ef..fe0ea388 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "contentctl" -version = "4.2.1" +version = "4.2.2" description = "Splunk Content Control Tool" authors = ["STRT "] license = "Apache 2.0"