mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
show mustang content by product
This commit is contained in:
+3
-3
@@ -3,11 +3,11 @@
|
||||
<!-- Example uses stats transforming command -->
|
||||
<!-- This limits evnts passed to post-process search -->
|
||||
<title>Splunk Security Content</title>
|
||||
<search id="baseSS">
|
||||
<query>| rest /services/saved/searches splunk_server=local count=0 | search title="ESCU - *"</query>
|
||||
<search id="baseSS">
|
||||
<query>| rest /services/saved/searches splunk_server=local count=0 | search title="ESCU - *" action.escu.product="*Splunk Security Analytics for AWS*"</query>
|
||||
</search>
|
||||
<search id="baseAS">
|
||||
<query>| rest /services/configs/conf-analytic_stories splunk_server=local count=0</query>
|
||||
<query>| rest /services/configs/conf-analytic_stories splunk_server=local count=0 product="*Splunk Security Analytics for AWS*"</query>
|
||||
</search>
|
||||
<init>
|
||||
<set token="form.as_category">*</set>
|
||||
|
||||
Reference in New Issue
Block a user