CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

More json for soc

Browse Source
This commit is contained in:
Mike Reeves
2020-10-01 17:28:45 -04:00
parent dc79dca7fe
commit 8a41636e7f
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/soc/files/soc/soc.json
View File

@@ -3,6 +3,7 @@
{%- set THEHIVEKEY = salt['pillar.get']('global:hivekey', '') %} {%- set THEHIVEKEY = salt['pillar.get']('global:hivekey', '') %}
{%- set FEATURES = salt['pillar.get']('elastic:features', False) %} {%- set FEATURES = salt['pillar.get']('elastic:features', False) %}
{%- import_yaml "soc/files/soc/alerts.queries.default.yaml" as alerts_queries %} {%- import_yaml "soc/files/soc/alerts.queries.default.yaml" as alerts_queries %}
{%- import_yaml "soc/files/soc/alerts.actions.default.yaml" as alerts_actions %}
{%- import_yaml "soc/files/soc/hunt.queries.default.yaml" as hunt_queries %} {%- import_yaml "soc/files/soc/hunt.queries.default.yaml" as hunt_queries %}
{%- import_yaml "soc/files/soc/hunt.actions.default.yaml" as hunt_actions %} {%- import_yaml "soc/files/soc/hunt.actions.default.yaml" as hunt_actions %}
{%- import_yaml "soc/files/soc/hunt.eventfields.default.yaml" as hunt_eventfields %} {%- import_yaml "soc/files/soc/hunt.eventfields.default.yaml" as hunt_eventfields %}
@@ -46,7 +47,7 @@
"relativeTimeValue": 24, "relativeTimeValue": 24,
"relativeTimeUnit": 30, "relativeTimeUnit": 30,
"mostRecentlyUsedLimit": 5, "mostRecentlyUsedLimit": 5,
"eventFields": {{ hunt_eventfields.soc.hunt.eventfields | json }} , "eventFields": { {{ hunt_eventfields.soc.hunt.eventfields | json }} },
"queryBaseFilter": "", "queryBaseFilter": "",
"queryToggleFilters": [], "queryToggleFilters": [],
"queries": {{ hunt_queries.soc.hunt.queries | json }} , "queries": {{ hunt_queries.soc.hunt.queries | json }} ,