Merge pull request #13069 from Security-Onion-Solutions/TOoSmOotH-patch-8

Update defaults.yaml
This commit is contained in:
Mike Reeves
2024-05-23 08:22:05 -04:00
committed by GitHub

View File

@@ -1482,7 +1482,7 @@ soc:
showSubtitle: true
- name: Elastalerts
description: ''
query: '_type:elastalert | groupby rule.name'
query: 'event.dataset:sigma.alert | groupby rule.name'
showSubtitle: true
- name: Alerts
description: Show all alerts grouped by alert source