splunk-pickaxe
splunk-pickaxe copied to clipboard
Duplicating Alert and Reports folder with same knowledge objects
I don't know if this is intended or a bug.
When I save the knowledge objects, I see that alerts and reports folders have exactly same KOs. I think its pulling both(alerts and reports) in two alerts folders and then again pulling both knowledge objects in reports folder.
I am using 2.7.0 of pickaxe
That sounds like a bug. Reports and Alerts are both just saved searches though the UI makes them look very distinct. We likely need to add some smarts when saving objects to filter out based on config if its an alert vs report