mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-10-23 22:53:03 +02:00
Add wilcards for CCS compatibility
This commit is contained in:
1 file changed
+1
-1
@@ -167,7 +167,7 @@
|
||||
"eventFields": {{ hunt_eventfields | json }},
|
||||
"queryBaseFilter": "",
|
||||
"queryToggleFilters": [
|
||||
{ "name": "caseExcludeToggle", "filter": "NOT _index:so-case*", "enabled": true }
|
||||
{ "name": "caseExcludeToggle", "filter": "NOT _index:\"*:so-case*\"", "enabled": true }
|
||||
],
|
||||
"queries": {{ hunt_queries | json }},
|
||||
"actions": {{ menu_actions | json }}
|
||||
|
||||
Reference in new issue
Block a user