[expose:incident_intelligence_settings]
pattern = incident_intelligence_settings
methods = POST, GET

[expose:incident_intelligence_settings_specified]
pattern = incident_intelligence_settings/*
methods = POST, GET, DELETE

[expose:_splunkd_data]
pattern = data/*
methods = GET