CSEC_PUBLIC/securityonion
1
0 Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-10-14 10:15:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove the Notifier agent mapping

Browse Source 
AlertTriage now sends its own notification through the Notify skill, so the
Notifier agent no longer exists in SOC.
This commit is contained in:
Mike Reeves committed 2026-10-13 17:35:22 -04:00
1 parent 747abeed79
commit 26f5d07435
2 files changed
+1 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

salt/soc/defaults.yaml
-1
View File
@@ -1545,7 +1545,6 @@ soc:
Investigator: haiku@SOAI
DetectionEngineer: haiku@SOAI
AlertTriage: haiku@SOAI
Notifier: haiku@SOAI
useMemory: false
useMemoryScanner: false
dontScanBefore: ""
salt/soc/soc_soc.yaml
+1 -4
View File
@@ -954,10 +954,7 @@ soc:
description: This agent manages detections and their overrides, including tuning noisy rules and authoring rule content.
global: True
AlertTriage:
description: This agent triages alerts autonomously for the Alert Triage automation, ending each run with a report and an assessment of the alert. It can notify through the Notifier but cannot acknowledge alerts or escalate to cases.
global: True
Notifier:
description: This agent sends a single notification on behalf of another agent, such as AlertTriage, and takes no other action.
description: This agent triages alerts autonomously for the Alert Triage automation, ending each run with a report and an assessment of the alert. It can send a notification but cannot acknowledge alerts or escalate to cases.
global: True
useMemory:
description: Enables the Memory system for OnionAI