404 Error - when trying to edit the macro

[sbvishnu]

We are getting a 404 error when we try to edit the macro to suit our organization needs as per your instructions in ‘Required actions after deployment' Section. (https://YOURSPLUNK/en-US/manager/ThreatHunting/admin/macros)

Can you help us on this?

[sbvishnu]

Any updates on this please?

[twiitchy]

I am having the same issue

[MineshK]

You should be able to edit your Macros in Splunk by going to: Settings > All configurations

This link should also take you there: https://yoursplunk/en-US/manager/ThreatHunting/admin/directory

From there, filter by App: ThreatHunting
Look for Config type: Macro.

You can click any which you want to edit from there. I searched in browser for "index=" and identified the indexes which needed renaming.