tweak: test case

splunk · Apr 16, 2024 · 2699114 · 2699114
1 parent ff4bb30
commit 2699114
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 5 deletions.
diff --git a/splunk/resource_splunk_saved_searches.go b/splunk/resource_splunk_saved_searches.go
@@ -601,19 +601,16 @@ func savedSearches() *schema.Resource {
 			"action_log_event_param_index": {
 				Type:        schema.TypeString,
 				Optional:    true,
-				Computed:    true,
 				Description: "Destination index for the logged event.",
 			},
 			"action_log_event_param_sourcetype": {
 				Type:        schema.TypeString,
 				Optional:    true,
-				Computed:    true,
 				Description: "Destination sourcetype for the logged event.",
 			},
 			"action_log_event_param_source": {
 				Type:        schema.TypeString,
 				Optional:    true,
-				Computed:    true,
 				Description: "Value of the source field for the logged event entry.",
 			},
 			"action_create_xsoar_incident": {

diff --git a/splunk/resource_splunk_saved_searches_test.go b/splunk/resource_splunk_saved_searches_test.go
@@ -103,7 +103,7 @@ resource "splunk_saved_searches" "test" {
 	name = "Test Log Event Alert"
 	actions = "logevent"
 	action_log_event = "1"
-	action_log_event_param_event = "$result.js$"
+	action_log_event_param_event = "test data"
 	action_log_event_param_host = "splunk"
 	action_log_event_param_index = "main"
 	action_log_event_param_sourcetype = "stash"
@@ -118,7 +118,7 @@ resource "splunk_saved_searches" "test" {
 	is_scheduled        = true
 	is_visible          = true
 	realtime_schedule   = true
-	search              = "index=main level=error | eval js = json_object("source_ip", src_ip, "destination_ip", dest_ip)"
+	search              = "index=main level=error"
 }
 `