Merge pull request #38 from linuxdaemon/sec-app

Ensure detections show up in the ES app

contentctl/actions/api_deploy.py

@@ -47,7 +47,7 @@ def execute(self, input_dto: API_DeployInputDto) -> None:
                 "username": target.username,
                 "password": target.password,
                 "owner": "nobody",
-                "app": "search",
+                "app": "SplunkEnterpriseSecuritySuite",
             }
             print("Warning - we are currently deploying all content into the 'search' app. "
                   "At this time, this means the user does not have to install the app "