From 0c2797ecdc81235e2b4f2c8ed3b34cf195692ba4 Mon Sep 17 00:00:00 2001
From: Mike Reeves <reevesmk@gmail.com>
Date: Wed, 26 Feb 2025 13:49:30 -0500
Subject: [PATCH] soc

---
 salt/soc/soc_soc.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml
index fc336a2df..338356c05 100644
--- a/salt/soc/soc_soc.yaml
+++ b/salt/soc/soc_soc.yaml
@@ -62,6 +62,7 @@ soc:
     actions:
       description: A list of actions a user can take from the SOC UI against a hunt, alert, and other records. The action must be defined in JSON object format, and contain a "name" key and "links" key. The links is a list of URLs, where the most suitable URL in the list will be the selected URL when the user clicks the action.
       global: True
+      syntax: json
       forcedType: "[]{}"
       uiElements:
       - field: description