Fix Dashboard Edits collector to use name/app fields instead of missing object field

Author: devinslick

default/savedsearches.conf

@@ -25,7 +25,7 @@ description = Collects dashboard edit/creation metrics from audit logs
 dispatch.earliest_time = -10m
 dispatch.latest_time = now
 enableSched = 1
-search = index=_audit action=edit_ui_view | rex field=object "(?<app>[^:]+):(?<dashboard_name>.+)" | where isnotnull(dashboard_name) | eval dashboard_uri="/app/".app."/".dashboard_name | lookup dashboard_registry dashboard_uri OUTPUT pretty_name app as reg_app owner | where isnotnull(pretty_name) | stats count as "dashboard.edits" by dashboard_uri, pretty_name, app, user | eval activity_type="edit" | mcollect index=caca_metrics split=t pretty_name app user activity_type
+search = index=_audit action=edit_ui_view | eval dashboard_name=name | where isnotnull(dashboard_name) | eval dashboard_uri="/app/".app."/".dashboard_name | lookup dashboard_registry dashboard_uri OUTPUT pretty_name app as reg_app owner | where isnotnull(pretty_name) | stats count as "dashboard.edits" by dashboard_uri, pretty_name, app, user | eval activity_type="edit" | mcollect index=caca_metrics split=t pretty_name app user activity_type
 schedule_priority = default
 schedule_window = 5
 dispatchAs = owner