When trying to create saved searches for Splunk Cloud, the auto_summarize field, even when not set, has a default value set. Having the field set results in a 400 response as the auto_summarize parameter does not seem to be handled by Splunk Cloud. Omitting the field when empty allows the saved search to be properly created and is defaulted to false regardless on if the field is set by default.
@mcmluk-monster Can you please rebase your master to pull the recent linter changes and update your PR? That should fix the CI failures. I can merge your branch once the tests pass. Thank you.
When trying to create saved searches for Splunk Cloud, the auto_summarize field, even when not set, has a default value set. Having the field set results in a 400 response as the auto_summarize parameter does not seem to be handled by Splunk Cloud. Omitting the field when empty allows the saved search to be properly created and is defaulted to false regardless on if the field is set by default.