mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Removed unneeded groupby
This commit is contained in:
@@ -2020,7 +2020,6 @@ soc:
|
|||||||
- event_data.destination.port
|
- event_data.destination.port
|
||||||
- event_data.process.executable
|
- event_data.process.executable
|
||||||
- event_data.process.pid
|
- event_data.process.pid
|
||||||
- rule.uuid
|
|
||||||
':sigma:':
|
':sigma:':
|
||||||
- soc_timestamp
|
- soc_timestamp
|
||||||
- event.dataset
|
- event.dataset
|
||||||
@@ -2034,7 +2033,6 @@ soc:
|
|||||||
- event_data.destination.port
|
- event_data.destination.port
|
||||||
- event_data.process.executable
|
- event_data.process.executable
|
||||||
- event_data.process.pid
|
- event_data.process.pid
|
||||||
- rule.uuid
|
|
||||||
':strelka:':
|
':strelka:':
|
||||||
- soc_timestamp
|
- soc_timestamp
|
||||||
- event.dataset
|
- event.dataset
|
||||||
@@ -2044,7 +2042,6 @@ soc:
|
|||||||
- file.source
|
- file.source
|
||||||
- file.mime_type
|
- file.mime_type
|
||||||
- log.id.fuid
|
- log.id.fuid
|
||||||
- rule.uuid
|
|
||||||
queryBaseFilter: tags:alert
|
queryBaseFilter: tags:alert
|
||||||
queryToggleFilters:
|
queryToggleFilters:
|
||||||
- name: acknowledged
|
- name: acknowledged
|
||||||
|
|||||||
Reference in New Issue
Block a user