diff --git a/contentctl.yml b/contentctl.yml
index 905ca78ed6..570a20607c 100644
--- a/contentctl.yml
+++ b/contentctl.yml
@@ -38,9 +38,9 @@ apps:
 - uid: 6553
   title: Splunk Add-on for Okta Identity Cloud
   appid: Splunk_TA_okta_identity_cloud
-  version: 2.2.1
+  version: 3.0.0
   description: description of app
-  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-okta-identity-cloud_221.tgz
+  hardcoded_path: https://attack-range-appbinaries.s3.us-west-2.amazonaws.com/splunk-add-on-for-okta-identity-cloud_300.tgz
 - uid: 6652
   title: Add-on for Linux Sysmon
   appid: Splunk_TA_linux_sysmon
diff --git a/data_sources/okta.yml b/data_sources/okta.yml
index 68c5787524..816d155e23 100644
--- a/data_sources/okta.yml
+++ b/data_sources/okta.yml
@@ -9,4 +9,4 @@ sourcetype: OktaIM2:log
 supported_TA:
 - name: Splunk Add-on for Okta Identity Cloud
   url: https://splunkbase.splunk.com/app/6553
-  version: 2.2.1
+  version: 3.0.0
diff --git a/macros/f5_bigip_rogue.yml b/macros/f5_bigip_rogue.yml
index 4c80756aaa..2fab5f6d64 100644
--- a/macros/f5_bigip_rogue.yml
+++ b/macros/f5_bigip_rogue.yml
@@ -1,4 +1,4 @@
-definition: index=netops sourcetype="f5:bigip:rogue"
+definition: sourcetype="f5:bigip:rogue"
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environment.
 name: f5_bigip_rogue
\ No newline at end of file
diff --git a/macros/zeek_rpc.yml b/macros/zeek_rpc.yml
index 373581dceb..f4c6dadea0 100644
--- a/macros/zeek_rpc.yml
+++ b/macros/zeek_rpc.yml
@@ -1,4 +1,4 @@
-definition: index=zeek sourcetype="zeek:rpc:json"
+definition: sourcetype="zeek:rpc:json"
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environment.
 name: zeek_rpc
diff --git a/macros/zeek_ssl.yml b/macros/zeek_ssl.yml
index 258e60a703..8d613468cf 100644
--- a/macros/zeek_ssl.yml
+++ b/macros/zeek_ssl.yml
@@ -1,4 +1,4 @@
-definition: index=zeek sourcetype="zeek:ssl:json"
+definition: sourcetype="zeek:ssl:json"
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environment.
 name: zeek_ssl