mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-18 15:02:50 +01:00
Also add to dashboard
Duplicate new queryToggleFilter from hunt to dashboard.
This commit is contained in:
@@ -1387,6 +1387,9 @@ soc:
|
||||
- name: caseExcludeToggle
|
||||
filter: 'NOT _index:"*:so-case*"'
|
||||
enabled: true
|
||||
- name: socExcludeToggle
|
||||
filter: 'NOT event.module:"soc"'
|
||||
enabled: true
|
||||
queries:
|
||||
- name: Overview
|
||||
description: Overview of all events
|
||||
|
||||
Reference in New Issue
Block a user