CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #143 from defensivedepth/playbook-alert-tweaks

Browse Source 
Playbook - thehive alert name change
This commit is contained in:
Mike Reeves
2019-11-26 09:58:39 -05:00
committed by GitHub
parent d9f21ebcb8 ed9c52925a
commit aafa99ec4e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/soctopus/files/templates/generic.template
View File

@@ -12,7 +12,7 @@ hive_proxies:
https: '' https: ''
hive_alert_config: hive_alert_config:
title: '{rule[name]}' title: '{rule[name]} - '
type: 'playbook' type: 'playbook'
source: 'SecurityOnion' source: 'SecurityOnion'
description: "`Play:` https://{{es}}/playbook/issues/6000 \n\n `View Event:` <https://{{es}}/kibana/app/kibana#/discover?_g=()&_a=(columns:!(_source),interval:auto,query:(language:lucene,query:'_id:{match[_id]}'),sort:!('@timestamp',desc))> \n\n `Raw Data:` {match[message]}" description: "`Play:` https://{{es}}/playbook/issues/6000 \n\n `View Event:` <https://{{es}}/kibana/app/kibana#/discover?_g=()&_a=(columns:!(_source),interval:auto,query:(language:lucene,query:'_id:{match[_id]}'),sort:!('@timestamp',desc))> \n\n `Raw Data:` {match[message]}"