Hi,
I've had an issue with the TA-Canary app/add-on. I installed both as per instruction, however when I looked at the dashboard presented in the app it was displaying data from a bunch of different indexes that the user had access to as per the role.
My solution was to adjust the macro 'canary_tools_index' to limit it to the specific index these logs are being stored in.
I assume this is the best way to do this?
Regards,
