diff --git a/contentctl/output/templates/savedsearches_detections.j2 b/contentctl/output/templates/savedsearches_detections.j2 index 8c800d72..73b04bfc 100644 --- a/contentctl/output/templates/savedsearches_detections.j2 +++ b/contentctl/output/templates/savedsearches_detections.j2 @@ -1,15 +1,16 @@ -### {{app.label}} DETECTIONS ### - [default] disabled = 1 description = "This search was removed in a previous release, or is otherwise not present." search = | makeresults | eval text = "This search was removed in a previous release, or is otherwise not present." +### {{app.label}} DETECTIONS ### + + {% for detection in objects %} [{{ detection.get_conf_stanza_name(app) }}] action.escu = 0 action.escu.enabled = 1 -description = {{ detection.status_aware_description | escapeNewlines() }} +description = {{ detection.status_aware_description | escapeNewlines() }} action.escu.mappings = {{ detection.mappings | tojson }} action.escu.data_models = {{ detection.datamodel | tojson }} action.escu.eli5 = {{ detection.status_aware_description | escapeNewlines() }} diff --git a/pyproject.toml b/pyproject.toml index 7bcca192..2a019987 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,7 +1,7 @@ [tool.poetry] name = "contentctl" -version = "5.5.11" +version = "5.5.12" description = "Splunk Content Control Tool" authors = ["STRT "]