mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
actions
This commit is contained in:
@@ -64,12 +64,12 @@ soc:
|
|||||||
global: True
|
global: True
|
||||||
forcedType: "[]{}"
|
forcedType: "[]{}"
|
||||||
uiElements:
|
uiElements:
|
||||||
- field: description
|
- field: description
|
||||||
label: Description
|
label: Description
|
||||||
- field: icon
|
- field: icon
|
||||||
label: Icon
|
label: Icon
|
||||||
- field: links
|
- field: links
|
||||||
label: Links
|
label: Links
|
||||||
eventFields:
|
eventFields:
|
||||||
default: &eventFields
|
default: &eventFields
|
||||||
description: Event fields mappings are defined by the format ":event.module:event.dataset". For example, to customize which fields show for 'syslog' events originating from 'zeek', find the eventField item in the left panel that looks like ':zeek:syslog'. The 'default' entry is used for all events that do not match an existing mapping defined in the list to the left.
|
description: Event fields mappings are defined by the format ":event.module:event.dataset". For example, to customize which fields show for 'syslog' events originating from 'zeek', find the eventField item in the left panel that looks like ':zeek:syslog'. The 'default' entry is used for all events that do not match an existing mapping defined in the list to the left.
|
||||||
|
|||||||
Reference in New Issue
Block a user