MineshK

You should be able to edit your Macros in Splunk by going to: Settings > All configurations This link should also take you there: https://yoursplunk/en-US/manager/ThreatHunting/admin/directory From there, filter by App:...

I thought I was going mad when I couldn't find a way to do this. I got some errors when importing, so want to delete them all and import again...