Fix dashboard description extraction in registry search

Author: devinslick

default/savedsearches.conf

@@ -68,6 +68,6 @@ description = Automatically updates dashboard registry via REST API, respecting
 dispatch.earliest_time = -5m
 dispatch.latest_time = now
 enableSched = 0
-search = | rest /services/data/ui/views splunk_server=local count=0 | search isDashboard=1 OR isVisible=1 | eval dashboard_uri="/app/".'eai:acl.app'."/".title | eval pretty_name=coalesce(label, title) | eval app='eai:acl.app' | eval owner='eai:acl.owner' | eval sharing='eai:acl.sharing' | eval description=coalesce('eai:data', "") | eval status="active" | lookup app_filter app OUTPUT include | where isnull(include) OR include="true" OR include="1" OR include="yes" | fields - include | table dashboard_uri pretty_name app owner sharing description status | outputlookup dashboard_registry.csv
+search = | rest /services/data/ui/views splunk_server=local count=0 | search isDashboard=1 OR isVisible=1 | eval dashboard_uri="/app/".'eai:acl.app'."/".title | eval pretty_name=coalesce(label, title) | eval app='eai:acl.app' | eval owner='eai:acl.owner' | eval sharing='eai:acl.sharing' | rex field="eai:data" "<description>(?<xml_description>.*?)</description>" | eval description=coalesce(xml_description, "") | eval status="active" | lookup app_filter app OUTPUT include | where isnull(include) OR include="true" OR include="1" OR include="yes" | fields - include | table dashboard_uri pretty_name app owner sharing description status | outputlookup dashboard_registry.csv
 schedule_priority = default
 dispatchAs = owner