match correct custom ruleset name

This commit is contained in:
DefensiveDepth
2025-12-08 16:45:40 -05:00
parent 72c8c2371e
commit 72a4ba405f

View File

@@ -70,7 +70,7 @@
{# Define the Detections custom ruleset that should always be present #}
{% set CUSTOM_RULESET = {
'name': 'custom',
'name': '__custom__',
'description': 'User-created custom rules created via the Detections module in the SOC UI',
'sourceType': 'elasticsearch',
'sourcePath': 'so_detection.ruleset:__custom__',