Contentctl

This release brings a number of exciting features and fixes. The most significant are as follows:

- **ACS Deploy Support** - contentctl can now deploy your app directly into your Classic OR Victoria Splunk Cloud Stack! https://github.com/splunk/contentctl/pull/114
- **Enable Specified Searches by Default** - You can now enable a search in your environment by default (instead of disabled by default) on app build time. When this app is deployed, the search will be scheduled to run. To do this, add the following key to your YML: `enabled_by_default: True` https://github.com/splunk/contentctl/pull/116
- **Allow Comments in Searches** - This fixes a bug where comments could be parsed as macros and cause validation failures. Now, you can include inline comments in the search field of your detection YMLs. https://github.com/splunk/contentctl/pull/115

Change enrichment CLI Behavior
New release to power the change from
--disable_enrichment
to
--enable_enrichment

Improve content development/testing performance
This release adds two new features.
First is the --skip_enrichment command which can be used as follows:

contentctl --skip_enrichment validate
contentctl --skip_enrichment build
contentctl --skip_enrichment test

This command line switch overrides the `enrichments` values contained in `contentctl.yml`, enabling contentctl commands to run MUCH faster by optionally disabling enrichment. Enrichment should still be used for final testing and release builds of content.

Second, since test environments take so long to be configured, by default they will be re-used for subsequent tests. This means that a container test environment, once it has been created, will remain running until it is manually terminated. This behavior can be overwritten by setting the option `contentctl_test.yml ---> infrastructure_config ---> persist_and_reuse_container = True`.
Note that if a test container does not exist when a test begins, it will be created. Finally, the presence of additional messages on the command line when running `contentctl test` indicates that this feature is active:

Container [splunk_contentctl_0] has NOT been terminated because 'contentctl_test.yml ---> infrastructure_config ---> persist_and_reuse_container = True'
To remove it, please manually run the following at the command line: `docker container rm -fv splunk_contentctl_0`


If you have made changes to your environment since it was built, such as adding new apps/TAs, OR you have updated any content that is NOT a detection (such as a macro or lookup), then please terminate your container and rerun `contentctl test`. At this time, those artifacts are not reflected into the persistent test environment.

Add Integration Testing
Integration Testing has been added to ensure proper creation of notables/observables in Splunk Enterprise Security.
This is an **advanced** feature which can be enabled with on the command line via `contentctl test --enable_integration_testing`. If doing so, please ensure that [Splunk Enterprise Security](https://splunkbase.splunk.com/app/263) is installed in your environment.

A number of additional stability and internal improvements were made to enable this change. Each test now runs a UNIT TEST and an INTEGRATION TEST. In the default behavior (without using --enable_integration_testing) these tests will appear as skipped.

In the near future, more verbose documentation will be published around the use of this feature.

Thank you to cmcginley-splunk for his excellent work on these updates!

Fixed a small bug in `contentctl new` which would not populate the status or description field correctly when creating a new detection.

contentctl new support
In addition to a handful of bugfixes, we are introducing support for creating NEW detections and stories automatically at the command line. This resolves the following issue reported by m0n3yspider :
https://github.com/splunk/contentctl/issues/66

These changes are based on a PR by 0xC0FFEEEE - thank you for your support!
https://github.com/splunk/contentctl/pull/83