The first 3 stanzas within the default/eventtypes.conf use searches with a hardcoded index which means if the user/admin changes the index to something other than the default (jfrog_splunk) then the eventtypes and tags won't work.
I believe that the three instances of index="jfrog_splunk" should be changed to `default_index`
The first 3 stanzas within the default/eventtypes.conf use searches with a hardcoded index which means if the user/admin changes the index to something other than the default (jfrog_splunk) then the eventtypes and tags won't work.
I believe that the three instances of index="jfrog_splunk" should be changed to `default_index`