mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Add so-user-disable script which deletes the SOC user and disables the users in Fleet, TheHive, and Cortex
This commit is contained in:
@@ -47,7 +47,7 @@ resp=$(curl -sk -XPOST -H "Authorization: Bearer $CORTEX_KEY" -H "Content-Type:
|
||||
if [[ "$resp" =~ \"status\":\"Ok\" ]]; then
|
||||
echo "Successfully added user to Cortex."
|
||||
else
|
||||
echo "Failed to add user to Cortex."
|
||||
echo "Unable to add user to Cortex; user might already exist."
|
||||
exit 2
|
||||
fi
|
||||
|
||||
Reference in New Issue
Block a user