doc: add wildcard to splunk query

SigmaHQ · Dec 29, 2023 · 7a003b0 · 7a003b0
1 parent e99fa28
commit 7a003b0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/basics/modifiers.md b/docs/basics/modifiers.md
@@ -343,7 +343,7 @@ detection:
 ```
 
 ```splunk [Splunk Output]
-regex fieldname=".*needle$"
+* | regex fieldname=".*needle$"
 ```
 
 :::