diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index 0a6285d34..e9e65f7f4 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -1638,6 +1638,9 @@ soc: - name: socExcludeToggle filter: 'NOT event.module:"soc"' enabled: true + - name: onionaiExcludeToggle + filter: 'NOT _index:"*:so-assistant-*"' + enabled: true queries: - name: Default Query description: Show all events grouped by the observer host