mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Python print ftl
This commit is contained in:
@@ -48,11 +48,11 @@
|
||||
"relativeTimeValue": 24,
|
||||
"relativeTimeUnit": 30,
|
||||
"mostRecentlyUsedLimit": 5,
|
||||
"eventFields": {{ hunt_eventfields }},
|
||||
"eventFields": {{ hunt_eventfields | json }},
|
||||
"queryBaseFilter": "",
|
||||
"queryToggleFilters": [],
|
||||
"queries": {{ hunt_queries }} ,
|
||||
"actions": {{ hunt_actions }} ,
|
||||
"queries": {{ hunt_queries | json }} ,
|
||||
"actions": {{ hunt_actions | json }} ,
|
||||
},
|
||||
"alerts": {
|
||||
"advanced": false,
|
||||
@@ -63,14 +63,14 @@
|
||||
"relativeTimeValue": 24,
|
||||
"relativeTimeUnit": 30,
|
||||
"mostRecentlyUsedLimit": 5,
|
||||
"eventFields": {{ alerts_eventfields }},
|
||||
"eventFields": {{ alerts_eventfields | json }},
|
||||
"queryBaseFilter": "event.dataset:alert",
|
||||
"queryToggleFilters": [
|
||||
{ "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true },
|
||||
{ "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true }
|
||||
],
|
||||
"queries": {{ alerts_queries }},
|
||||
"actions": {{ alerts_actions }}
|
||||
"queries": {{ alerts_queries | json }},
|
||||
"actions": {{ alerts_actions | json }}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user