From fc2d450de04c688a1ade7724aad4aa31fe637c5a Mon Sep 17 00:00:00 2001
From: Corey Ogburn <corey.ogburn@securityonionsolutions.com>
Date: Tue, 26 Aug 2025 09:16:04 -0600
Subject: [PATCH] Update Settings

The apiKey will be built off of the license rather than a new setting. The model is hardcoded for now at the AI Gateway level. We're going to use the investigationPrompt as a trigger for the feature being visible in the UI but by default will be blank for now.
---
 salt/soc/defaults.yaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml
index c86889be7..f89d9e99f 100644
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -1492,9 +1492,8 @@ soc:
                 branch: main
                 folder: securityonion-normalized
         assistant:
-          apiKey:
           apiUrl: https://onionai-dev.securityonion.net
-          model: claude-sonnet
+          investigationPrompt:
         salt:
           queueDir: /opt/sensoroni/queue
           timeoutMs: 45000