Merge pull request #465 from splunk/inspect_fix

Move default stanza outside of detections section

Author: pyth0n1c

contentctl/output/templates/savedsearches_detections.j2

@@ -1,15 +1,16 @@
-### {{app.label}} DETECTIONS ###
-
 [default]
 disabled = 1
 description = "This search was removed in a previous release, or is otherwise not present."
 search = | makeresults | eval text = "This search was removed in a previous release, or is otherwise not present."
 
+### {{app.label}} DETECTIONS ###
+
+
 {% for detection in objects %}
 [{{ detection.get_conf_stanza_name(app) }}]
 action.escu = 0
 action.escu.enabled = 1
-description = {{ detection.status_aware_description | escapeNewlines() }}
+description = {{ detection.status_aware_description | escapeNewlines() }} 
 action.escu.mappings = {{ detection.mappings | tojson }}
 action.escu.data_models = {{ detection.datamodel | tojson }}
 action.escu.eli5 = {{ detection.status_aware_description | escapeNewlines() }}

pyproject.toml

@@ -1,7 +1,7 @@
 [tool.poetry]
 name = "contentctl"
 
-version = "5.5.11"
+version = "5.5.12"
 
 description = "Splunk Content Control Tool"
 authors = ["STRT <research@splunk.com>"]