mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 01:02:46 +01:00
Add Elastic Agent datastreams to SOC index
This commit is contained in:
@@ -64,7 +64,7 @@ soc:
|
||||
remoteHostUrls: []
|
||||
username:
|
||||
password:
|
||||
index: '*:so-*,*:endgame-*'
|
||||
index: '*:so-*,*:endgame-*,.ds-logs*'
|
||||
cacheMs: 300000
|
||||
verifyCert: false
|
||||
casesEnabled: true
|
||||
|
||||
Reference in New Issue
Block a user