From 3304aff62ba67f7c9e167e54e587c612ee343c56 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Wed, 7 Oct 2026 08:56:44 -0400 Subject: [PATCH] Note that an oai query also needs the agentic assistant SOC (securityonion-soc#1363) now hides a query licensed for oai unless the assistant is enabled and agentic, so the query editor's license help says so. Claude-Session: https://claude.ai/code/session_01SZLcwj68A2wLo3F8TGKsLP --- salt/soc/soc_soc.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml index 28654bb8a..458f287fd 100644 --- a/salt/soc/soc_soc.yaml +++ b/salt/soc/soc_soc.yaml @@ -1210,7 +1210,7 @@ soc: label: Show Query in Dropdown. forcedType: bool - field: license - label: Only show on grids licensed for this feature, e.g. oai. Leave blank to show everywhere. + label: Only show on grids licensed for this feature, e.g. oai. An oai query also needs the assistant enabled and agentic. Leave blank to show everywhere. queryToggleFilters: description: Customize togglable query filters that apply to all queries. Exclusive toggles will invert the filter if toggled off rather than omitting the filter from the query. global: True