CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python print ftl

Browse Source
This commit is contained in:
Mike Reeves
2020-10-01 17:57:56 -04:00
parent 490278a4c3
commit a0432e97b0
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
salt/soc/files/soc/soc.json
View File

@@ -48,11 +48,11 @@
"relativeTimeValue": 24, "relativeTimeValue": 24,
"relativeTimeUnit": 30, "relativeTimeUnit": 30,
"mostRecentlyUsedLimit": 5, "mostRecentlyUsedLimit": 5,
"eventFields": {{ hunt_eventfields }}, "eventFields": {{ hunt_eventfields | json }},
"queryBaseFilter": "", "queryBaseFilter": "",
"queryToggleFilters": [], "queryToggleFilters": [],
"queries": {{ hunt_queries }} , "queries": {{ hunt_queries | json }} ,
"actions": {{ hunt_actions }} , "actions": {{ hunt_actions | json }} ,
}, },
"alerts": { "alerts": {
"advanced": false, "advanced": false,
@@ -63,14 +63,14 @@
"relativeTimeValue": 24, "relativeTimeValue": 24,
"relativeTimeUnit": 30, "relativeTimeUnit": 30,
"mostRecentlyUsedLimit": 5, "mostRecentlyUsedLimit": 5,
"eventFields": {{ alerts_eventfields }}, "eventFields": {{ alerts_eventfields | json }},
"queryBaseFilter": "event.dataset:alert", "queryBaseFilter": "event.dataset:alert",
"queryToggleFilters": [ "queryToggleFilters": [
{ "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true }, { "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true },
{ "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true } { "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true }
], ],
"queries": {{ alerts_queries }}, "queries": {{ alerts_queries | json }},
"actions": {{ alerts_actions }} "actions": {{ alerts_actions | json }}
} }
} }
} }