diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index 97a24ead7..b97ba11e6 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -2147,6 +2147,7 @@ soc: eventFetchLimit: 500 relativeTimeValue: 24 relativeTimeUnit: 30 + maxBulkEscalateEvents: 100 mostRecentlyUsedLimit: 5 ackEnabled: true escalateEnabled: true diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml index a667d1f7a..ea651cb47 100644 --- a/salt/soc/soc_soc.yaml +++ b/salt/soc/soc_soc.yaml @@ -496,7 +496,11 @@ soc: global: True advanced: True forcedType: "[]{}" - alerts: *appSettings + alerts: + <<: *appSettings + maxBulkEscalateEvents: + description: Maximum number of events to escalate in a single bulk escalation. + global: True cases: *appSettings dashboards: *appSettings detections: