mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Add status presets
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
[
|
||||
{ "name": "New Cases", "query": "!case.status:closed" },
|
||||
{ "name": "Closed Cases", "query": "case.status:closed" },
|
||||
{ "name": "Templates", "query": "case.category:template" }
|
||||
{ "name": "New Cases", "query": "!case.status:Closed" },
|
||||
{ "name": "Closed Cases", "query": "case.status:Closed" },
|
||||
{ "name": "Templates", "query": "case.category:Template" }
|
||||
]
|
||||
8
salt/soc/files/soc/presets.status.json
Normal file
8
salt/soc/files/soc/presets.status.json
Normal file
@@ -0,0 +1,8 @@
|
||||
{
|
||||
"labels": [
|
||||
"New",
|
||||
"In Progress",
|
||||
"Closed",
|
||||
],
|
||||
"customEnabled": false
|
||||
}
|
||||
@@ -21,6 +21,7 @@
|
||||
{%- import_json "soc/files/soc/presets.category.json" as presets_category %}
|
||||
{%- import_json "soc/files/soc/presets.pap.json" as presets_pap %}
|
||||
{%- import_json "soc/files/soc/presets.severity.json" as presets_severity %}
|
||||
{%- import_json "soc/files/soc/presets.status.json" as presets_status %}
|
||||
{%- import_json "soc/files/soc/presets.tag.json" as presets_tag %}
|
||||
{%- import_json "soc/files/soc/presets.tlp.json" as presets_tlp %}
|
||||
{%- set DNET = salt['pillar.get']('global:dockernet', '172.17.0.0') %}
|
||||
@@ -214,7 +215,8 @@
|
||||
"presets": {
|
||||
"category": {{ presets_category | json }},
|
||||
"pap": {{ presets_pap | json }},
|
||||
"severity": {{ presets_severity | json }},
|
||||
"severity": {{ presets_severity | json }},
|
||||
"status": {{ presets_status | json }},
|
||||
"tag": {{ presets_tag | json }},
|
||||
"tlp": {{ presets_tlp | json }}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user