From 9eeb527ea710413d87104304c18d88dbf3c06fea Mon Sep 17 00:00:00 2001 From: Jason Ertel Date: Thu, 23 Jul 2020 17:18:42 -0400 Subject: [PATCH] Include UTC parameter when providing a hyperlink to Hunt from so-import-pcap output --- salt/common/tools/sbin/so-import-pcap | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/salt/common/tools/sbin/so-import-pcap b/salt/common/tools/sbin/so-import-pcap index 2281ff943..aef6e98d8 100755 --- a/salt/common/tools/sbin/so-import-pcap +++ b/salt/common/tools/sbin/so-import-pcap @@ -212,9 +212,9 @@ cat << EOF Import complete! You can use the following hyperlink to view data in the time range of your import. You can triple-click to quickly highlight the entire hyperlink and you can then copy it into your browser: -https://{{ MANAGERIP }}/#/hunt?q=import.id:${HASH}%20%7C%20groupby%20event.module%20event.dataset&t=${START_OLDEST_SLASH}%2000%3A00%3A00%20AM%20-%20${END_NEWEST_SLASH}%2000%3A00%3A00%20AM +https://{{ MANAGERIP }}/#/hunt?q=import.id:${HASH}%20%7C%20groupby%20event.module%20event.dataset&t=${START_OLDEST_SLASH}%2000%3A00%3A00%20AM%20-%20${END_NEWEST_SLASH}%2000%3A00%3A00%20AM&z=UTC -or you can manually set your Time Range to be: +or you can manually set your Time Range to be (in UTC): From: $START_OLDEST To: $END_NEWEST Please note that it may take 30 seconds or more for events to appear in Onion Hunt.