contentctl icon indicating copy to clipboard operation
contentctl copied to clipboard

Add UI dispatch app

Open pyth0n1c opened this issue 9 months ago • 0 comments

Add an additional field to savedsearches.conf called request.ui_dispatch_app = SplunkEnterpriseSecuritySuite

This ensures proper tracking/accounting for the context under which searches run in-app.

There are a number of changes to other Jinja2 template files because we now pass the entire app object (from contentctl) into the Jinja2 conf file templates, not just the APP_NAME string. This gives us more flexibility with what makes it ultimately into the conf file!

pyth0n1c avatar May 14 '24 19:05 pyth0n1c