From d0bf659d82e8419386b3c493662c99409be752a9 Mon Sep 17 00:00:00 2001
From: bpatel <bpatel@splunk.com>
Date: Tue, 1 Jun 2021 14:48:43 -0700
Subject: [PATCH] skew for all apps

---
 bin/jinja2_templates/savedsearches.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/jinja2_templates/savedsearches.j2 b/bin/jinja2_templates/savedsearches.j2
index d80c836797..ba0df448e9 100644
--- a/bin/jinja2_templates/savedsearches.j2
+++ b/bin/jinja2_templates/savedsearches.j2
@@ -84,11 +84,11 @@ action.email.useNSSubject = 1
 alert.digest_mode = 1
 {% if detection.disabled is defined %}
 disabled = false
-allow_skew = 100%
 {% else %}
 disabled = true
 {% endif %}
 enableSched = 1
+allow_skew = 100%
 counttype = number of events
 relation = greater than
 quantity = 0