From 7205c5cb7bc47d0e161dde49d43b3d364bb2ce2a Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Thu, 10 Jun 2021 15:21:03 -0400
Subject: [PATCH] Provide timestamp as arg to SOC PCAP pivots

---
 salt/soc/files/soc/menu.actions.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/soc/files/soc/menu.actions.json b/salt/soc/files/soc/menu.actions.json
index 558d10a36..665ca4c39 100644
--- a/salt/soc/files/soc/menu.actions.json
+++ b/salt/soc/files/soc/menu.actions.json
@@ -15,8 +15,8 @@
             ]},
   { "name": "actionPcap", "description": "actionPcapHelp", "icon": "fa-stream", "target": "", 
             "links": [
-              "/joblookup?esid={:soc_id}", 
-              "/joblookup?ncid={:network.community_id}"
+              "/joblookup?esid={:soc_id}&time={:@timestamp}", 
+              "/joblookup?ncid={:network.community_id}&time={:@timestamp}"
             ]},
   { "name": "actionCyberChef", "description": "actionCyberChefHelp", "icon": "fas fa-bread-slice", "target": "_blank", 
             "links": [