From 1b47537a3f2d808e8cc9176fbfe636edadea6c7f Mon Sep 17 00:00:00 2001 From: Josh Brower Date: Wed, 6 Mar 2024 07:16:50 -0500 Subject: [PATCH] Add Exclusion toggle --- salt/soc/defaults.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index d5ecbe71f..60f2ee613 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -1201,6 +1201,9 @@ soc: - name: caseExcludeToggle filter: 'NOT _index:"*:so-case*"' enabled: true + - name: detectionsExcludeToggle + filter: 'NOT _index:"*:so-detection*"' + enabled: true - name: socExcludeToggle filter: 'NOT event.module:"soc"' enabled: true @@ -1471,6 +1474,9 @@ soc: - name: caseExcludeToggle filter: 'NOT _index:"*:so-case*"' enabled: true + - name: detectionsExcludeToggle + filter: 'NOT _index:"*:so-detection*"' + enabled: true - name: socExcludeToggle filter: 'NOT event.module:"soc"' enabled: true