3.0.14
New reports:
SearchHeadLevel - Lookup definitions with no lookup file or kvstore collection
SearchHeadLevel - User created kvstore collections
SearchHeadLevel - Search Queries summary loadjob and savedsearch usage in audit logs
Updated alerts:
AllSplunkEnterpriseLevel - Splunkd Log Messages Admins Only
SearchHeadLevel - Detect bundle pushes no longer occurring
SearchHeadLevel - macros in use
SearchHeadLevel - Search Messages user level
Updated reports:
SearchHeadLevel - audit.log - lookup usage
- added regex as the search field sometimes doesn't auto-extract correctlySearchHeadLevel - Detect lookups that have not being accessed for a period of time
- added automatic lookups inSearchHeadLevel - platform_stats access summary
- criteria updateSearchHeadLevel - Lookup file owners
- corrections to ensure that automatic lookups are not includedSearchHeadLevel - Search Queries summary non-exact match
- minor criteria update