diff --git a/salt/soc/files/soc/soc.json b/salt/soc/files/soc/soc.json index 99b556cbe..5da0a0a16 100644 --- a/salt/soc/files/soc/soc.json +++ b/salt/soc/files/soc/soc.json @@ -48,11 +48,11 @@ "relativeTimeValue": 24, "relativeTimeUnit": 30, "mostRecentlyUsedLimit": 5, - "eventFields": {{ hunt_eventfields }}, + "eventFields": {{ hunt_eventfields | json }}, "queryBaseFilter": "", "queryToggleFilters": [], - "queries": {{ hunt_queries }} , - "actions": {{ hunt_actions }} , + "queries": {{ hunt_queries | json }} , + "actions": {{ hunt_actions | json }} , }, "alerts": { "advanced": false, @@ -63,14 +63,14 @@ "relativeTimeValue": 24, "relativeTimeUnit": 30, "mostRecentlyUsedLimit": 5, - "eventFields": {{ alerts_eventfields }}, + "eventFields": {{ alerts_eventfields | json }}, "queryBaseFilter": "event.dataset:alert", "queryToggleFilters": [ { "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true }, { "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true } ], - "queries": {{ alerts_queries }}, - "actions": {{ alerts_actions }} + "queries": {{ alerts_queries | json }}, + "actions": {{ alerts_actions | json }} } } }