contentctl 5.5.10__tar.gz → 5.5.11__tar.gz

{contentctl-5.5.10 → contentctl-5.5.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: contentctl
-Version: 5.5.10
+Version: 5.5.11
 Summary: Splunk Content Control Tool
 License: Apache 2.0
 License-File: LICENSE.md

{contentctl-5.5.10 → contentctl-5.5.11}/contentctl/output/templates/savedsearches_detections.j2

@@ -1,10 +1,15 @@
 ### {{app.label}} DETECTIONS ###
 
+[default]
+disabled = 1
+description = "This search was removed in a previous release, or is otherwise not present."
+search = | makeresults | eval text = "This search was removed in a previous release, or is otherwise not present."
+
 {% for detection in objects %}
 [{{ detection.get_conf_stanza_name(app) }}]
 action.escu = 0
 action.escu.enabled = 1
-description = {{ detection.status_aware_description | escapeNewlines() }} 
+description = {{ detection.status_aware_description | escapeNewlines() }}
 action.escu.mappings = {{ detection.mappings | tojson }}
 action.escu.data_models = {{ detection.datamodel | tojson }}
 action.escu.eli5 = {{ detection.status_aware_description | escapeNewlines() }}

contentctl-5.5.11/contentctl/templates/app_template/metadata/default.meta

@@ -0,0 +1,14 @@
+## shared Application-level permissions
+[]
+access = read : [ * ], write : [ admin, sc_admin ]
+export = system
+
+[savedsearches]
+owner = admin
+
+## DO NOT EXPORT THE [default] stanza, and the [default] stanza alone.
+## Because this comes later in the default.meta file, it overrides the
+## export = system for [] above.
+## We MAY want to consider change the access, like making this stanza read-only or similar
+[savedsearches/default]
+export = none

{contentctl-5.5.10 → contentctl-5.5.11}/pyproject.toml

@@ -1,7 +1,7 @@
 [tool.poetry]
 name = "contentctl"
 
-version = "5.5.10"
+version = "5.5.11"
 
 description = "Splunk Content Control Tool"
 authors = ["STRT <research@splunk.com>"]

contentctl-5.5.10/contentctl/templates/app_template/metadata/default.meta

@@ -1,23 +0,0 @@
-## shared Application-level permissions
-[]
-access = read : [ * ], write : [ admin, sc_admin ]
-export = system
-
-[savedsearches]
-owner = admin
-
-## Correlation Searches
-[correlationsearches]
-access = read : [ * ], write : [ * ]
-
-[governance]
-access = read : [ * ], write : [ * ]
-
-## Managed Configurations
-[managed_configurations]
-access = read : [ * ], write : [ * ]
-
-## Postprocess
-[postprocess]
-access = read : [ * ], write : [ * ]
-