CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add wilcards for CCS compatibility

Browse Source
This commit is contained in:
Jason Ertel
2022-01-07 15:57:08 -05:00
parent d3656a7777
commit 66c9e20c6a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/soc/files/soc/soc.json
View File

@@ -167,7 +167,7 @@
"eventFields": {{ hunt_eventfields | json }}, "eventFields": {{ hunt_eventfields | json }},
"queryBaseFilter": "", "queryBaseFilter": "",
"queryToggleFilters": [ "queryToggleFilters": [
{ "name": "caseExcludeToggle", "filter": "NOT _index:so-case*", "enabled": true } { "name": "caseExcludeToggle", "filter": "NOT _index:\"*:so-case*\"", "enabled": true }
], ],
"queries": {{ hunt_queries | json }}, "queries": {{ hunt_queries | json }},
"actions": {{ menu_actions | json }} "actions": {{ menu_actions | json }}