This commit is contained in:
defensivedepth committed 2026-10-06 06:49:27 -04:00
1 parent ed58fb7429
commit 06ffaf1373
1 file changed
+1 -1
+1 -1
View File
@@ -85,7 +85,7 @@
{% do SOCMERGED.config.server.update({'airgapEnabled': false}) %}
{% endif %}
{# Sigma correlations require ES|QL: offer correlation authoring only when it is on #}
{# correlation authoring requires ES|QL #}
{% if not SOCMERGED.config.server.modules.elastalertengine.useEsql %}
{% do SOCMERGED.config.server.client.detection.templateDetections.pop('elastalert_correlation', None) %}
{% do SOCMERGED.config.server.client.detections.update({'queries': SOCMERGED.config.server.client.detections.queries | rejectattr('name', 'equalto', 'Detection Type - Sigma (Elastalert) - Correlations') | list}) %}