https://community.splunk.com/t5/Splunk-Enterprise-Security/Correlation-searches/m-p/480659#M7702 <P>Whats your splunk core and ES version? The searches do get updated (if there is an update, in the default/savedsearches.conf of the respective app). However, if you had overwritten them and have a copy in your local/savedsearches.conf, you would need to validate/reconcile them.</P> Wed, 06 May 2020 09:32:30 GMT lakshman239 2020-05-06T09:32:30Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Correlation-searches/m-p/480658#M7701 <P>Hi All,</P> <P>I upgraded my Splunk ES and i could notice that for some reason the "Out Of The Box" correlation searches are not getting upgraded to their newer version.</P> <P>Does anyone know why?</P> <P>Do i have to manually upgrade every correlation search?</P> <P>Thanks !</P> Sun, 07 Jun 2020 16:31:53 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Correlation-searches/m-p/480658#M7701 astatrial 2020-06-07T16:31:53Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Correlation-searches/m-p/480659#M7702 <P>Whats your splunk core and ES version? The searches do get updated (if there is an update, in the default/savedsearches.conf of the respective app). However, if you had overwritten them and have a copy in your local/savedsearches.conf, you would need to validate/reconcile them.</P> Wed, 06 May 2020 09:32:30 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Correlation-searches/m-p/480659#M7702 lakshman239 2020-05-06T09:32:30Z