CSEC_PUBLIC/securityonion
1
0 Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-10-23 22:53:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6762 from Security-Onion-Solutions/kilo

Browse Source 
Switch soc.json to use lowercase labels in default queries; Also enab…
This commit is contained in:
Jason Ertel authored and GitHub committed 2022-01-05 09:59:39 -05:00
2 parents 1adc4c5346 4bfdfffe21
commit 89415b12ce
2 files changed
+4 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

salt/soc/files/soc/cases.queries.json
+3 -3
View File
@@ -1,5 +1,5 @@
[
{ "name": "Open Cases", "query": "NOT case.status:Closed AND NOT case.category:Template" },
{ "name": "Closed Cases", "query": "case.status:Closed AND NOT case.category:Template" },
{ "name": "Templates", "query": "case.category:Template" }
{ "name": "Open Cases", "query": "NOT case.status:closed AND NOT case.category:template" },
{ "name": "Closed Cases", "query": "case.status:closed AND NOT case.category:template" },
{ "name": "Templates", "query": "case.category:template" }
]
salt/soc/files/soc/soc.json
+1
View File
@@ -207,6 +207,7 @@
"escalateEnabled": false,
"escalateRelatedEventsEnabled": false,
"viewEnabled": true,
"createLink": "/case/create",
"eventFields": {{ cases_eventfields | json }},
"queryBaseFilter": "_index:\"*:so-case\" AND kind:case",
"queryToggleFilters": [