mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
soc.json stuff
This commit is contained in:
@@ -180,7 +180,7 @@
|
|||||||
{ "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true },
|
{ "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true },
|
||||||
{ "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true }
|
{ "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true }
|
||||||
],
|
],
|
||||||
"queries": {{ alert_queries.soc.alerts.queries | json }}
|
"queries": {{ alerts_queries.soc.alerts.queries | json }}
|
||||||
,
|
,
|
||||||
"actions": [
|
"actions": [
|
||||||
{ "name": "", "description": "actionHuntHelp", "icon": "fa-crosshairs", "link": "/#/hunt?q=\"{value}\" | groupby event.module event.dataset", "target": "_blank" },
|
{ "name": "", "description": "actionHuntHelp", "icon": "fa-crosshairs", "link": "/#/hunt?q=\"{value}\" | groupby event.module event.dataset", "target": "_blank" },
|
||||||
|
|||||||
Reference in New Issue
Block a user