Skip to content

Commit 1e6024a

Browse files
authored
Update README.md
1 parent 2224aeb commit 1e6024a

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

README.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -372,8 +372,10 @@ Updated alerts:
372372
- `SearchHeadLevel - Splunk alert actions exceeding the max_action_results limit` - excluded summary indexing
373373

374374
Updated reports:
375-
- `SearchHeadLevel - Search Queries summary non-exact match` - added delim for index IN (a b c)
376-
- `SearchHeadLevel - Search Queries summary exact match` - added delim for index IN (a b c)
375+
- `SearchHeadLevel - indexes per savedsearch` - corrected typo on multisearch, re-wrote parts of the query to include subsearches as well
376+
- `SearchHeadLevel - Indexes for savedsearch without subsearches` - corrected typo on multisearch
377+
- `SearchHeadLevel - Search Queries summary non-exact match` - added delim for index IN (a b c), corrected typo on multisearch
378+
- `SearchHeadLevel - Search Queries summary exact match` - added delim for index IN (a b c), corrected typo on multisearch
377379

378380
### 4.0.0
379381
- Merged pull request from sifters relating to replacing comment macro with the triple backtick option introduced in Splunk 8.1. This involved editing many searches to change the format of the comments.

0 commit comments

Comments
 (0)