diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index fd5c65e78..7541c6763 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -212,6 +212,24 @@ soc: - destination.port - dnp3.fc_reply - log.id.uid + '::dnp3_control': + - soc_timestamp + - source.ip + - source.port + - destination.ip + - destination.port + - dnp3.function_code + - dnp3.block_type + - log.id.uid + '::dnp3_objects': + - soc_timestamp + - source.ip + - source.port + - destination.ip + - destination.port + - dnp3.function_code + - dnp3.object_type + - log.id.uid '::dns': - soc_timestamp - source.ip @@ -1415,6 +1433,24 @@ soc: - destination.port - dnp3.fc_reply - log.id.uid + '::dnp3_control': + - soc_timestamp + - source.ip + - source.port + - destination.ip + - destination.port + - dnp3.function_code + - dnp3.block_type + - log.id.uid + '::dnp3_objects': + - soc_timestamp + - source.ip + - source.port + - destination.ip + - destination.port + - dnp3.function_code + - dnp3.object_type + - log.id.uid '::dns': - soc_timestamp - source.ip