From f3830e044a0b5555a36ec55eddcacdc004976af3 Mon Sep 17 00:00:00 2001
From: marcnil815 <33084026+marcnil815@users.noreply.github.com>
Date: Mon, 15 Feb 2021 14:13:17 +0100
Subject: [PATCH] Update definition.json

Added possibility for multiple searches in same object to accomodate using raw searches and datamodel searches.
---
 objects/splunk/definition.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/objects/splunk/definition.json b/objects/splunk/definition.json
index fb0c9cd..37f16b5 100644
--- a/objects/splunk/definition.json
+++ b/objects/splunk/definition.json
@@ -46,6 +46,7 @@
       "description": "Search / Correlation search",
       "disable_correlation": true,
       "misp-attribute": "text",
+      "multiple": true,
       "ui-priority": 0
     }
   },
@@ -57,4 +58,4 @@
   ],
   "uuid": "fd9b7bf8-df7b-4df9-bcd8-28591edcaab8",
   "version": 1
-}
\ No newline at end of file
+}