From 360a91ebbb960dc7f1c6d1f69812d556469c0061 Mon Sep 17 00:00:00 2001 From: research-bot Date: Wed, 18 Dec 2024 13:32:03 -0800 Subject: [PATCH] remove index --- macros/f5_bigip_rogue.yml | 2 +- macros/zeek_rpc.yml | 2 +- macros/zeek_ssl.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/macros/f5_bigip_rogue.yml b/macros/f5_bigip_rogue.yml index 4c80756aaa..2fab5f6d64 100644 --- a/macros/f5_bigip_rogue.yml +++ b/macros/f5_bigip_rogue.yml @@ -1,4 +1,4 @@ -definition: index=netops sourcetype="f5:bigip:rogue" +definition: sourcetype="f5:bigip:rogue" description: customer specific splunk configurations(eg- index, source, sourcetype). Replace the macro definition with configurations for your Splunk Environment. name: f5_bigip_rogue \ No newline at end of file diff --git a/macros/zeek_rpc.yml b/macros/zeek_rpc.yml index 373581dceb..f4c6dadea0 100644 --- a/macros/zeek_rpc.yml +++ b/macros/zeek_rpc.yml @@ -1,4 +1,4 @@ -definition: index=zeek sourcetype="zeek:rpc:json" +definition: sourcetype="zeek:rpc:json" description: customer specific splunk configurations(eg- index, source, sourcetype). Replace the macro definition with configurations for your Splunk Environment. name: zeek_rpc diff --git a/macros/zeek_ssl.yml b/macros/zeek_ssl.yml index 258e60a703..8d613468cf 100644 --- a/macros/zeek_ssl.yml +++ b/macros/zeek_ssl.yml @@ -1,4 +1,4 @@ -definition: index=zeek sourcetype="zeek:ssl:json" +definition: sourcetype="zeek:ssl:json" description: customer specific splunk configurations(eg- index, source, sourcetype). Replace the macro definition with configurations for your Splunk Environment. name: zeek_ssl