Issues

• Add digest mode setting

  enhancement
  Feature

  splunk/contentctl#468 · Filter by author n3w4z4 opened on Feb 5, 2026
  1

• Built-in validation logic for Response Plans

  enhancement
  Feature

  splunk/contentctl#461 · Filter by author code2319 opened on Jan 13, 2026

• [BUG] alert.suppress parameter is locked in by the Splunk GUI (ES Content Management)

  bug
  Bug

  splunk/contentctl#452 · Filter by author AndreiBanaru opened on Nov 10, 2025

• [BUG] Discrepancy for parameters with JSON values

  bug
  Bug

  splunk/contentctl#464 · Filter by author AndreiBanaru opened on Nov 10, 2025
  3

• ServiceNow Incident Integration as an alert action

  enhancement
  Feature

  splunk/contentctl#451 · Filter by author AndreiBanaru opened on Nov 7, 2025

• Include sendcsv parameter for email alert action

  enhancement
  Feature

  splunk/contentctl#447 · Filter by author AndreiBanaru opened on Oct 23, 2025

• [BUG] alert.digest_mode should be dynamic in savedsearches_detections.j2

  bug
  Bug

  splunk/contentctl#445 · Filter by author AndreiBanaru opened on Oct 20, 2025

• [BUG] Custom Scheduling for detections

  bug
  Bug

  splunk/contentctl#430 · Filter by author n3w4z4 opened on Jul 24, 2025
  4

• contentctl new command to accept more parameters or load from a template

  enhancement
  Feature

  splunk/contentctl#407 · Filter by author getkub opened on May 9, 2025

• Validation Rules/Tuning & CICD Output

  enhancement
  Feature

  splunk/contentctl#364 · Filter by author danbutcher-payroc opened on Feb 5, 2025
  2

• Enforce that field names are not repeated across risk objects as part of build/validate

  splunk/contentctl#347 · Filter by author cmcginley-splunk opened on Jan 16, 2025

• Expand risk message validation to ensure appropriate field values are present

  splunk/contentctl#346 · Filter by author cmcginley-splunk opened on Jan 16, 2025

• Victoria-aware Lookup File Naming should be detected

  enhancement
  Feature

  splunk/contentctl#342 · Filter by author ljstella opened on Dec 18, 2024
  2

  

• [Refactor proposal] streamline filtering of detection types across all code and Jinja templates

  splunk/contentctl#339 · Filter by author cmcginley-splunk opened on Dec 10, 2024

• [Bug] resolve one off error in CLI reporting

  Bug

  splunk/contentctl#338 · Filter by author cmcginley-splunk opened on Dec 10, 2024

• [Refactor proposal] futures can be hard to maintain/debug; let's consider alternatives

  splunk/contentctl#337 · Filter by author cmcginley-splunk opened on Dec 10, 2024

• [bug] Apps built on Windows cannot be deployed using ACS

  Bug

  splunk/contentctl#331 · Filter by author Res260 opened on Nov 21, 2024

• [Feature proposal] Allow for a "should not trigger" test type

  splunk/contentctl#326 · Filter by author Res260 opened on Nov 14, 2024
  3

• [Feature Request] Ability to add specific NIST mappings

  enhancement
  Feature

  splunk/contentctl#323 · Filter by author ljstella opened on Nov 6, 2024

• Allow splunk_api_username and splunk_api_password to be specified as environment variables

  splunk/contentctl#321 · Filter by author Res260 opened on Nov 4, 2024
  1

  

• TestApp.hardcoded_path is required even if not needed

  Bug

  splunk/contentctl#319 · Filter by author Res260 opened on Oct 24, 2024
  1

  

• Value error, Error, there must be AT LEAST 1 Observable with the role 'Victim' declared in Detection.tags.observables. However, none were found.

  splunk/contentctl#315 · Filter by author Res260 opened on Oct 22, 2024
  1

• Error: This detection is required to have 2 drilldown_searches, but only has [0]

  Bug

  splunk/contentctl#312 · Filter by author Res260 opened on Oct 21, 2024
  1

• 2x New CICD Checks for Detection Validation

  splunk/contentctl#310 · Filter by author dluxtron opened on Oct 16, 2024

• test & release_notes assume repo location

  splunk/contentctl#306 · Filter by author 0xC0FFEEEE opened on Oct 10, 2024