mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Playbook - thehive alert tweak
This commit is contained in:
@@ -12,7 +12,7 @@ hive_proxies:
|
|||||||
https: ''
|
https: ''
|
||||||
|
|
||||||
hive_alert_config:
|
hive_alert_config:
|
||||||
title: '{rule[name]}'
|
title: '{rule[name]} - '
|
||||||
type: 'playbook'
|
type: 'playbook'
|
||||||
source: 'SecurityOnion'
|
source: 'SecurityOnion'
|
||||||
description: "`Play:` https://{{es}}/playbook/issues/6000 \n\n `View Event:` <https://{{es}}/kibana/app/kibana#/discover?_g=()&_a=(columns:!(_source),interval:auto,query:(language:lucene,query:'_id:{match[_id]}'),sort:!('@timestamp',desc))> \n\n `Raw Data:` {match[message]}"
|
description: "`Play:` https://{{es}}/playbook/issues/6000 \n\n `View Event:` <https://{{es}}/kibana/app/kibana#/discover?_g=()&_a=(columns:!(_source),interval:auto,query:(language:lucene,query:'_id:{match[_id]}'),sort:!('@timestamp',desc))> \n\n `Raw Data:` {match[message]}"
|
||||||
|
|||||||
Reference in New Issue
Block a user