contentctl
contentctl copied to clipboard
Add UI dispatch app
Add an additional field to savedsearches.conf called
request.ui_dispatch_app = SplunkEnterpriseSecuritySuite
This ensures proper tracking/accounting for the context under which searches run in-app.
There are a number of changes to other Jinja2 template files because we now pass the entire app object (from contentctl) into the Jinja2 conf file templates, not just the APP_NAME string. This gives us more flexibility with what makes it ultimately into the conf file!