From 269911401f635d16ffbc9da36b50c10982a41a12 Mon Sep 17 00:00:00 2001 From: Garrett Beasley Date: Tue, 16 Apr 2024 10:41:39 -0700 Subject: [PATCH] tweak: test case --- splunk/resource_splunk_saved_searches.go | 3 --- splunk/resource_splunk_saved_searches_test.go | 4 ++-- 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/splunk/resource_splunk_saved_searches.go b/splunk/resource_splunk_saved_searches.go index 1a5a4f9c..7693555c 100644 --- a/splunk/resource_splunk_saved_searches.go +++ b/splunk/resource_splunk_saved_searches.go @@ -601,19 +601,16 @@ func savedSearches() *schema.Resource { "action_log_event_param_index": { Type: schema.TypeString, Optional: true, - Computed: true, Description: "Destination index for the logged event.", }, "action_log_event_param_sourcetype": { Type: schema.TypeString, Optional: true, - Computed: true, Description: "Destination sourcetype for the logged event.", }, "action_log_event_param_source": { Type: schema.TypeString, Optional: true, - Computed: true, Description: "Value of the source field for the logged event entry.", }, "action_create_xsoar_incident": { diff --git a/splunk/resource_splunk_saved_searches_test.go b/splunk/resource_splunk_saved_searches_test.go index 9ab58f4a..cdda6a12 100644 --- a/splunk/resource_splunk_saved_searches_test.go +++ b/splunk/resource_splunk_saved_searches_test.go @@ -103,7 +103,7 @@ resource "splunk_saved_searches" "test" { name = "Test Log Event Alert" actions = "logevent" action_log_event = "1" - action_log_event_param_event = "$result.js$" + action_log_event_param_event = "test data" action_log_event_param_host = "splunk" action_log_event_param_index = "main" action_log_event_param_sourcetype = "stash" @@ -118,7 +118,7 @@ resource "splunk_saved_searches" "test" { is_scheduled = true is_visible = true realtime_schedule = true - search = "index=main level=error | eval js = json_object("source_ip", src_ip, "destination_ip", dest_ip)" + search = "index=main level=error" } `