it looks like the jinja forces a detections name to be APP_NAME + name + ' - Rule'. If there is a hard name length for detections then a lot of characters are being used for an app name and post-fix. Please design this better? or allow for longer names if Splunk itself does not have a name length limit.
it looks like the jinja forces a detections name to be APP_NAME + name + ' - Rule'. If there is a hard name length for detections then a lot of characters are being used for an app name and post-fix. Please design this better? or allow for longer names if Splunk itself does not have a name length limit.