From df0b484b452fdc2408742ade0cc7f9dfebba9c40 Mon Sep 17 00:00:00 2001
From: Corey Ogburn <corey.ogburn@securityonionsolutions.com>
Date: Tue, 2 Sep 2025 15:07:13 -0600
Subject: [PATCH] More Descriptive Description

Include instructions for how to add local lookups and a help link.
---
 salt/soc/soc_soc.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml
index f08bfd52b..2d0eb3792 100644
--- a/salt/soc/soc_soc.yaml
+++ b/salt/soc/soc_soc.yaml
@@ -181,8 +181,9 @@ soc:
           forcedType: bool
           default: false
       enableReverseLookup:
-        description: Set to true to enable reverse DNS lookups for IP addresses in the SOC UI.
+        description: "Set to true to enable reverse DNS lookups for IP addresses in the SOC UI. To add your own local lookups, create a CSV file at /nsm/custom-mappings/ip-descriptions.csv on your Manager and populate the file with IP addresses and descriptions as follows: IP, Description. Elasticsearch will then ingest the CSV during the next high state."
         global: True
+        helpLink: soc-customization.html#reverse-dns
       modules:
         elastalertengine:
           aiRepoUrl: