CRL-1645 - Fixing macros for excessive runinstances and terminateinst…

…ances to use src_user in description.
splunk · Nov 26, 2019 · 322e711 · 322e711
1 parent 95f73c9
commit 322e711
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/macros/ec2_excessive_runinstances_mltk_input_filter.yml b/macros/ec2_excessive_runinstances_mltk_input_filter.yml
@@ -1,3 +1,3 @@
 description: Use this macro to add additional filters for monitoring ec2 
-  runinstances [eg - userName != 'someUserNameExperiencingFalsePositives'].
+  runinstances [eg - src_user != 'someUserNameExperiencingFalsePositives'].
 name: ec2_excessive_runinstances_mltk_input_filter
diff --git a/macros/ec2_excessive_terminateinstances_mltk_input_filter.yml b/macros/ec2_excessive_terminateinstances_mltk_input_filter.yml
@@ -1,3 +1,3 @@
 description: Use this macro to add additional filters for monitoring ec2 
-  runinstances [eg - userName != 'someUserNameExperiencingFalsePositives'].
+  terminateinstances [eg - src_user != 'someUserNameExperiencingFalsePositives'].
 name: ec2_excessive_terminateinstances_mltk_input_filter