add exclusion toggle

2025-12-06 17:22:49 +01:00 · 2025-10-21 09:33:41 -04:00
parent feddd90e41
commit bdcd1e099d
1 changed files with 3 additions and 0 deletions
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -1636,6 +1636,9 @@ soc:
            - name: socExcludeToggle
              filter: 'NOT event.module:"soc"'
              enabled: true
+            - name: onionaiExcludeToggle
+              filter: 'NOT _index:"*:so-assistant-*"'
+              enabled: true
          queries:
            - name: Default Query
              description: Show all events grouped by the observer host