CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12742 from Security-Onion-Solutions/dougburks-patch-1

Browse Source 
FEATURE: Add Events table columns for event.module kratos #12740
This commit is contained in:
Doug Burks
2024-04-03 12:48:24 -04:00
committed by GitHub
parent f615a73120 9078b2bad2
commit 58d081eed1
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/soc/defaults.yaml
View File

@@ -87,12 +87,13 @@ soc:
- log.id.uid - log.id.uid
- network.community_id - network.community_id
- event.dataset - event.dataset
':kratos:audit': ':kratos:':
- soc_timestamp - soc_timestamp
- http_request.headers.x-real-ip - http_request.headers.x-real-ip
- identity_id - identity_id
- http_request.headers.user-agent - http_request.headers.user-agent
- event.dataset - event.dataset
- msg
'::conn': '::conn':
- soc_timestamp - soc_timestamp
- source.ip - source.ip