From ed9c52925a92bebe75c5f1102fd294c5209a0f70 Mon Sep 17 00:00:00 2001
From: Josh Brower <Josh@Defensivedepth.com>
Date: Sat, 23 Nov 2019 14:09:41 -0500
Subject: [PATCH] Playbook - thehive alert tweak

---
 salt/soctopus/files/templates/generic.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/soctopus/files/templates/generic.template b/salt/soctopus/files/templates/generic.template
index e278afa2c..80dd1a762 100644
--- a/salt/soctopus/files/templates/generic.template
+++ b/salt/soctopus/files/templates/generic.template
@@ -12,7 +12,7 @@ hive_proxies:
   https: ''
 
 hive_alert_config:
-  title: '{rule[name]}'
+  title: '{rule[name]} - '
   type: 'playbook'
   source: 'SecurityOnion'
   description: "`Play:` https://{{es}}/playbook/issues/6000 \n\n `View Event:` <https://{{es}}/kibana/app/kibana#/discover?_g=()&_a=(columns:!(_source),interval:auto,query:(language:lucene,query:'_id:{match[_id]}'),sort:!('@timestamp',desc))>  \n\n `Raw Data:` {match[message]}"