Skip to content

Commit 4d5b3da

Browse files
authored
Update sentinelone_use_case_query_examples.xml
remove hardcoded account
1 parent f66a130 commit 4d5b3da

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Splunk Dashboards/sentinelone_use_case_query_examples.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@
6767
<table>
6868
<title>SPL: | dataset method=powerquery search="$baseQuery$ | columns endpoint.name | group count=count() by endpoint.name" | spath | table endpoint.name, count</title>
6969
<search>
70-
<query>| dataset account=xdr method=powerquery search="$baseQuery$ | columns endpoint.name | group count=count() by endpoint.name" | spath | table endpoint.name, count</query>
70+
<query>| dataset method=powerquery search="$baseQuery$ | columns endpoint.name | group count=count() by endpoint.name" | spath | table endpoint.name, count</query>
7171
<earliest>$myTime.earliest$</earliest>
7272
<latest>$myTime.latest$</latest>
7373
<sampleRatio>1</sampleRatio>

0 commit comments

Comments
 (0)