From db1bf535ce128864c5a20610050b9979246b49ec Mon Sep 17 00:00:00 2001 From: bpatel Date: Wed, 17 Feb 2021 11:34:35 -0800 Subject: [PATCH 1/6] testing --- package/default/restmap.conf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/package/default/restmap.conf b/package/default/restmap.conf index 57b018696b..5e04ae3efa 100644 --- a/package/default/restmap.conf +++ b/package/default/restmap.conf @@ -4,3 +4,7 @@ capability.write = admin_all_objects [admin:content-version] match = /content-version members = conf + +[admin:content-version] +match = /ui-tour +members = conf \ No newline at end of file From 8cdf6676a01cab4dd4b954eb70ded97a6ff47f15 Mon Sep 17 00:00:00 2001 From: bpatel Date: Wed, 17 Feb 2021 11:46:52 -0800 Subject: [PATCH 2/6] test: --- package/default/restmap.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/default/restmap.conf b/package/default/restmap.conf index 5e04ae3efa..ad67856ef6 100644 --- a/package/default/restmap.conf +++ b/package/default/restmap.conf @@ -5,6 +5,6 @@ capability.write = admin_all_objects match = /content-version members = conf -[admin:content-version] +[admin:ui-tour] match = /ui-tour members = conf \ No newline at end of file From 1b6856c8d7a42e711d7c2d1c11de7fb9091226d3 Mon Sep 17 00:00:00 2001 From: bpatel Date: Wed, 17 Feb 2021 12:00:39 -0800 Subject: [PATCH 3/6] reload simple --- package/default/app.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/package/default/app.conf b/package/default/app.conf index 7de04d2796..8ab6872c34 100644 --- a/package/default/app.conf +++ b/package/default/app.conf @@ -16,6 +16,7 @@ reload.governance = simple reload.managed_configurations = simple reload.postprocess = simple reload.content-version = simple +reload.ui-tour = simple [launcher] author = Splunk From 8856a0a8a616c856012d4d57acfed1b321454fd6 Mon Sep 17 00:00:00 2001 From: bpatel Date: Wed, 17 Feb 2021 12:12:42 -0800 Subject: [PATCH 4/6] not allowed in app.conf --- package/default/app.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/package/default/app.conf b/package/default/app.conf index 8ab6872c34..7de04d2796 100644 --- a/package/default/app.conf +++ b/package/default/app.conf @@ -16,7 +16,6 @@ reload.governance = simple reload.managed_configurations = simple reload.postprocess = simple reload.content-version = simple -reload.ui-tour = simple [launcher] author = Splunk From bae1a56a4477e2188c53dec49bf2040f73c67ddb Mon Sep 17 00:00:00 2001 From: bpatel Date: Wed, 17 Feb 2021 12:13:22 -0800 Subject: [PATCH 5/6] remove restmap for uitour --- package/default/restmap.conf | 4 ---- 1 file changed, 4 deletions(-) diff --git a/package/default/restmap.conf b/package/default/restmap.conf index ad67856ef6..57b018696b 100644 --- a/package/default/restmap.conf +++ b/package/default/restmap.conf @@ -4,7 +4,3 @@ capability.write = admin_all_objects [admin:content-version] match = /content-version members = conf - -[admin:ui-tour] -match = /ui-tour -members = conf \ No newline at end of file From 4fbaea460da312a117ac9eddfe139a1e0c3aa92a Mon Sep 17 00:00:00 2001 From: bpatel Date: Thu, 18 Feb 2021 08:17:46 -0800 Subject: [PATCH 6/6] remove ui tour --- package/default/data/ui/nav/default.xml | 1 - package/default/ui-tour.conf | 24 ------------------------ 2 files changed, 25 deletions(-) delete mode 100644 package/default/ui-tour.conf diff --git a/package/default/data/ui/nav/default.xml b/package/default/data/ui/nav/default.xml index dad999c1c6..6b3a7332fc 100644 --- a/package/default/data/ui/nav/default.xml +++ b/package/default/data/ui/nav/default.xml @@ -6,5 +6,4 @@ Docs - Take a Tour diff --git a/package/default/ui-tour.conf b/package/default/ui-tour.conf deleted file mode 100644 index b68dadda6c..0000000000 --- a/package/default/ui-tour.conf +++ /dev/null @@ -1,24 +0,0 @@ -[escu_tour] -context = DA-ESS-ContentUpdate -doneURL = /app/DA-ESS-ContentUpdate/escu_summary?form.as_cis=*&form.as_category=*&form.cis_token=*&form.searchtype=*&form.as_kill_chain_phase=*&form.as_mitre_attack=*&form.as_data_models=*&form.kill_chain_phase=*&form.mitre_attack=*&form.data_models=* -imageCaption2 = Indicators of compromise can be difficult to stitch together to construct a bigger picture. ESCU's Analytic Stories help you monitor for common adversary tactics and techniques, which helps you decide whether to investigate further. -imageCaption3 = When you open ESCU, you’ll see the total number of Analytic Stories, the number of stories updated with the last two weeks, the categories they fall into, and the stages of the kill chain they relate to. -imageCaption4 = Each Analytic Story includes a narrative that provides deep background on the attack technique in question. The "Run Analytics" button will kick off the detection searches in the order in which they appear. -imageCaption5 = On the right are the Kill Chain and MITRE ATT&CK framework phases the story is related to. -imageCaption6 = Each search includes an “Explain it like I’m Five (ELI5)” section that breaks it down in terms that even your boss can understand. -imageCaption7 = The “How to Implement” section explains prerequisites required for the searches to work correctly. “Known False Positives” helps you understand some of the conditions that may create misleading results. -imageCaption8 = We invite you to collaborate with us by sharing your feedback and suggesting topics for Analytic Stories. Click on the “Feedback Center” tab in the green menu bar. -imageName2 = Slide2.PNG -imageName3 = Slide3.PNG -imageName4 = Slide4.PNG -imageName5 = Slide5.PNG -imageName6 = Slide6.PNG -imageName7 = Slide7.PNG -imageName8 = Slide8.PNG -imgPath = /escu -label = ESCU -skipText = Skip tour -type = image -viewed = 0 -imageName1 = Slide1.PNG -imageCaption1 = This biweekly subscription service delivers pre-packaged security content that helps you better address security problems and threats in your environment and get the most out of Splunk Enterprise Security.