CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

add exclusion toggle

Browse Source
This commit is contained in:
Jason Ertel
2025-10-21 09:33:41 -04:00
parent feddd90e41
commit bdcd1e099d
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/soc/defaults.yaml
View File

@@ -1636,6 +1636,9 @@ soc:
- name: socExcludeToggle - name: socExcludeToggle
filter: 'NOT event.module:"soc"' filter: 'NOT event.module:"soc"'
enabled: true enabled: true
- name: onionaiExcludeToggle
filter: 'NOT _index:"*:so-assistant-*"'
enabled: true
queries: queries:
- name: Default Query - name: Default Query
description: Show all events grouped by the observer host description: Show all events grouped by the observer host