From 47e43e53d93afc9bb619f464686098ffa0060aef Mon Sep 17 00:00:00 2001 From: Doug Burks Date: Tue, 13 Dec 2022 12:43:10 -0500 Subject: [PATCH] FIX: so-import utilities should hyperlink to dashboards #9373 --- salt/common/tools/sbin/so-import-evtx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/salt/common/tools/sbin/so-import-evtx b/salt/common/tools/sbin/so-import-evtx index 4737a2419..a196c1193 100755 --- a/salt/common/tools/sbin/so-import-evtx +++ b/salt/common/tools/sbin/so-import-evtx @@ -166,11 +166,11 @@ cat << EOF Import complete! You can use the following hyperlink to view data in the time range of your import. You can triple-click to quickly highlight the entire hyperlink and you can then copy it into your browser: -https://{{ URLBASE }}/#/hunt?q=import.id:${RUNID}%20%7C%20groupby%20event.module%20event.dataset&t=${START_OLDEST_SLASH}%2000%3A00%3A00%20AM%20-%20${END_NEWEST_SLASH}%2000%3A00%3A00%20AM&z=UTC +https://{{ URLBASE }}/#/dashboards?q=import.id:${RUNID}%20%7C%20groupby%20event.module%20event.dataset&t=${START_OLDEST_SLASH}%2000%3A00%3A00%20AM%20-%20${END_NEWEST_SLASH}%2000%3A00%3A00%20AM&z=UTC or you can manually set your Time Range to be (in UTC): From: $START_OLDEST_FORMATTED To: $END_NEWEST -Please note that it may take 30 seconds or more for events to appear in Hunt. +Please note that it may take 30 seconds or more for events to appear in Security Onion Console. EOF fi