Update savedsearches.conf

Author: gjanders

default/savedsearches.conf

@@ -7339,7 +7339,7 @@ quantity = 0
 relation = greater than
 request.ui_dispatch_app = SplunkAdmins
 request.ui_dispatch_view = search
-search = index=_internal source=*crash.log \
+search = index=_internal sourcetype=splunkd_crash_log \
 | stats count by source, host, sourcetype \
 | eval indexer_cluster=`indexer_cluster_name(host)` \
 | eval search_head=host \