CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

More json for soc

Browse Source
This commit is contained in:
Mike Reeves
2020-10-01 17:28:45 -04:00
parent dc79dca7fe
commit 8a41636e7f
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/soc/files/soc/soc.json
View File

@@ -3,6 +3,7 @@
{%- set THEHIVEKEY = salt['pillar.get']('global:hivekey', '') %}
{%- set FEATURES = salt['pillar.get']('elastic:features', False) %}
{%- import_yaml "soc/files/soc/alerts.queries.default.yaml" as alerts_queries %}
{%- import_yaml "soc/files/soc/alerts.actions.default.yaml" as alerts_actions %}
{%- import_yaml "soc/files/soc/hunt.queries.default.yaml" as hunt_queries %}
{%- import_yaml "soc/files/soc/hunt.actions.default.yaml" as hunt_actions %}
{%- import_yaml "soc/files/soc/hunt.eventfields.default.yaml" as hunt_eventfields %}
@@ -46,7 +47,7 @@
"relativeTimeValue": 24,
"relativeTimeUnit": 30,
"mostRecentlyUsedLimit": 5,
"eventFields": {{ hunt_eventfields.soc.hunt.eventfields | json }} ,
"eventFields": { {{ hunt_eventfields.soc.hunt.eventfields | json }} },
"queryBaseFilter": "",
"queryToggleFilters": [],
"queries": {{ hunt_queries.soc.hunt.queries | json }} ,