Merge pull request #3247 from splunk/issue_3245

Remove index from macro
splunk · Jan 3, 2025 · 1ae042b · 1ae042b
2 parents 458bf0c + 4ad7bcc
commit 1ae042b
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/macros/f5_bigip_rogue.yml b/macros/f5_bigip_rogue.yml
@@ -1,4 +1,4 @@
-definition: index=netops sourcetype="f5:bigip:rogue"
+definition: sourcetype="f5:bigip:rogue"
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environment.
 name: f5_bigip_rogue
diff --git a/macros/zeek_rpc.yml b/macros/zeek_rpc.yml
@@ -1,4 +1,4 @@
-definition: index=zeek sourcetype="zeek:rpc:json"
+definition: sourcetype="zeek:rpc:json"
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environment.
 name: zeek_rpc
diff --git a/macros/zeek_ssl.yml b/macros/zeek_ssl.yml
@@ -1,4 +1,4 @@
-definition: index=zeek sourcetype="zeek:ssl:json"
+definition: sourcetype="zeek:ssl:json"
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environment.
 name: zeek_ssl