Hi All,
I upgraded my Splunk ES and i could notice that for some reason the "Out Of The Box" correlation searches are not getting upgraded to their newer version.
Does anyone know why?
Do i have to manually upgrade every correlation search?
Thanks !
Whats your splunk core and ES version? The searches do get updated (if there is an update, in the default/savedsearches.conf of the respective app). However, if you had overwritten them and have a copy in your local/savedsearches.conf, you would need to validate/reconcile them.