From 8e15ed56d6cd81c7fb4c99e336a355d2c6adf645 Mon Sep 17 00:00:00 2001 From: Jason Ertel Date: Thu, 1 Oct 2020 16:23:47 -0400 Subject: [PATCH] 'Escalated' filter toggle will auto-enable 'acknowledged' filter toggle --- salt/soc/files/soc/soc.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/soc/files/soc/soc.json b/salt/soc/files/soc/soc.json index bc800050e..86d528550 100644 --- a/salt/soc/files/soc/soc.json +++ b/salt/soc/files/soc/soc.json @@ -177,7 +177,7 @@ "queryBaseFilter": "event.dataset:alert", "queryToggleFilters": [ { "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true }, - { "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true } + { "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true, "enablesToggles":["acknowledged"] } ], "queries": [ { "name": "Group By Name, Module", "query": "* | groupby rule.name rule.uuid event.module event.severity_label" },