Merge pull request #7916 from Security-Onion-Solutions/kilo

Disable actions on dashboards group-by tables
This commit is contained in:
Jason Ertel
2022-05-09 11:52:22 -04:00
committed by GitHub

View File

@@ -162,6 +162,7 @@
"ackEnabled": false, "ackEnabled": false,
"escalateEnabled": true, "escalateEnabled": true,
"escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }}, "escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }},
"aggregationActionsEnabled": true,
"eventFields": {{ hunt_eventfields | json }}, "eventFields": {{ hunt_eventfields | json }},
"queryBaseFilter": "", "queryBaseFilter": "",
"queryToggleFilters": [ "queryToggleFilters": [
@@ -182,6 +183,7 @@
"ackEnabled": false, "ackEnabled": false,
"escalateEnabled": true, "escalateEnabled": true,
"escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }}, "escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }},
"aggregationActionsEnabled": false,
"eventFields": {{ hunt_eventfields | json }}, "eventFields": {{ hunt_eventfields | json }},
"queryBaseFilter": "", "queryBaseFilter": "",
"queryToggleFilters": [ "queryToggleFilters": [
@@ -205,6 +207,7 @@
"ackEnabled": true, "ackEnabled": true,
"escalateEnabled": true, "escalateEnabled": true,
"escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }}, "escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }},
"aggregationActionsEnabled": true,
"eventFields": {{ alerts_eventfields | json }}, "eventFields": {{ alerts_eventfields | json }},
"queryBaseFilter": "event.dataset:alert", "queryBaseFilter": "event.dataset:alert",
"queryToggleFilters": [ "queryToggleFilters": [
@@ -226,6 +229,7 @@
"ackEnabled": false, "ackEnabled": false,
"escalateEnabled": false, "escalateEnabled": false,
"escalateRelatedEventsEnabled": false, "escalateRelatedEventsEnabled": false,
"aggregationActionsEnabled": false,
"viewEnabled": true, "viewEnabled": true,
"createLink": "/case/create", "createLink": "/case/create",
"eventFields": {{ cases_eventfields | json }}, "eventFields": {{ cases_eventfields | json }},