CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #13409 from Security-Onion-Solutions/fix/elastic_fleet_defender

Browse Source 
Fix defender winlog name change
This commit is contained in:
weslambert
2024-07-30 15:47:45 -04:00
committed by GitHub
parent 2b90bdc86a 3fa6c72620
commit bd223d8643
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/elasticfleet/files/integrations/endpoints-initial/windows-defender.json
View File

@@ -11,11 +11,11 @@
"winlogs-winlog": {
"enabled": true,
"streams": {
"winlog.winlog": {
"winlog.winlogs": {
"enabled": true,
"vars": {
"channel": "Microsoft-Windows-Windows Defender/Operational",
"data_stream.dataset": "winlog.winlogs",
"data_stream.dataset": "winlog.winlog",
"preserve_original_event": false,
"providers": [],
"ignore_older": "72h",