diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index f51a938bc..5035ec39e 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -1465,7 +1465,7 @@ soc: - core - emerging_threats_addon useEsql: false - caseInsensitive: true + esqlCaseInsensitive: true elastic: hostUrl: remoteHostUrls: [] diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml index e49ad6ce7..eed72f04c 100644 --- a/salt/soc/soc_soc.yaml +++ b/salt/soc/soc_soc.yaml @@ -396,8 +396,8 @@ soc: global: True advanced: True forcedType: bool - caseInsensitive: - description: "Match string values case-insensitively. Applies to ES|QL only." + esqlCaseInsensitive: + description: "Match string values case-insensitively when converting Sigma rules. Applies to ES|QL only" global: True advanced: True forcedType: bool