From 7f025fa12ba43d7591750480a7211a60149c0935 Mon Sep 17 00:00:00 2001 From: ljstella Date: Tue, 3 Feb 2026 10:56:05 -0500 Subject: [PATCH 1/3] Move default stanza outside of detections section --- contentctl/output/templates/savedsearches_detections.j2 | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/contentctl/output/templates/savedsearches_detections.j2 b/contentctl/output/templates/savedsearches_detections.j2 index 8c800d72..294626be 100644 --- a/contentctl/output/templates/savedsearches_detections.j2 +++ b/contentctl/output/templates/savedsearches_detections.j2 @@ -1,10 +1,11 @@ -### {{app.label}} DETECTIONS ### - [default] disabled = 1 description = "This search was removed in a previous release, or is otherwise not present." search = | makeresults | eval text = "This search was removed in a previous release, or is otherwise not present." +### {{app.label}} DETECTIONS ### + + {% for detection in objects %} [{{ detection.get_conf_stanza_name(app) }}] action.escu = 0 From 8c07fb22c249f516273422acd2cf18545815f66c Mon Sep 17 00:00:00 2001 From: ljstella Date: Tue, 3 Feb 2026 11:11:01 -0500 Subject: [PATCH 2/3] Add trailing space back --- contentctl/output/templates/savedsearches_detections.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contentctl/output/templates/savedsearches_detections.j2 b/contentctl/output/templates/savedsearches_detections.j2 index 294626be..73b04bfc 100644 --- a/contentctl/output/templates/savedsearches_detections.j2 +++ b/contentctl/output/templates/savedsearches_detections.j2 @@ -10,7 +10,7 @@ search = | makeresults | eval text = "This search was removed in a previous rele [{{ detection.get_conf_stanza_name(app) }}] action.escu = 0 action.escu.enabled = 1 -description = {{ detection.status_aware_description | escapeNewlines() }} +description = {{ detection.status_aware_description | escapeNewlines() }} action.escu.mappings = {{ detection.mappings | tojson }} action.escu.data_models = {{ detection.datamodel | tojson }} action.escu.eli5 = {{ detection.status_aware_description | escapeNewlines() }} From 61b5d524b545e00b40a8d6319f3316f4eedfb595 Mon Sep 17 00:00:00 2001 From: ljstella Date: Tue, 3 Feb 2026 11:17:20 -0500 Subject: [PATCH 3/3] Bumping version in prep for release --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 7bcca192..2a019987 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,7 +1,7 @@ [tool.poetry] name = "contentctl" -version = "5.5.11" +version = "5.5.12" description = "Splunk Content Control Tool" authors = ["STRT "]