Skip to content

Conversation

pyth0n1c
Copy link
Contributor

We need to prevent the labels for the name of a search from being too long because it can cause issues in the user interface.
As such, we have removed the words - Experimental -, - Deprecated -, and - RIR - from the action.correlationsearch.label field in savedsearches.conf.

@patel-bhavin
Copy link
Contributor

Tested on Gamorr, the build looks good! Originally this search errors out when we try to save this. Not any more:

Slack Thread: https://splunk.slack.com/archives/C06S8S085HP/p1722267799266179

Testing:

image

image

@patel-bhavin patel-bhavin merged commit ea9f56d into main Jul 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants