From b58b3afa35347f2dc8d7de0dc5571776b76e7442 Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Thu, 5 Dec 2019 03:22:10 +0000
Subject: [PATCH] add auto_analyze_alerts option

---
 salt/soctopus/files/SOCtopus.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/soctopus/files/SOCtopus.conf b/salt/soctopus/files/SOCtopus.conf
index d7314bbac..37ec0172d 100644
--- a/salt/soctopus/files/SOCtopus.conf
+++ b/salt/soctopus/files/SOCtopus.conf
@@ -6,9 +6,10 @@
 es_url = http://{{ip}}:9200
 
 [cortex]
-supported_analyzers = Urlscan_io_Search,CERTatPassiveDNS
+auto_analyze_alerts = no
 cortex_url = https://{{ip}}/cortex/
 cortex_key = {{ CORTEXKEY }}
+supported_analyzers = Urlscan_io_Search,CERTatPassiveDNS
 
 [fir]
 fir_url = YOURFIRURL