Merge pull request #16266 from Security-Onion-Solutions/mreeves/soai-context-1m

Raise SOAI Sonnet default small context limit to 1M

salt/common/tools/sbin/so-log-check

@@ -177,6 +177,7 @@ if [[ $EXCLUDE_FALSE_POSITIVE_ERRORS == 'Y' ]]; then
     EXCLUDED_ERRORS="$EXCLUDED_ERRORS|Unexpected authorization header" # expected WARN log lines indicating invalid auth header
     EXCLUDED_ERRORS="$EXCLUDED_ERRORS|Missing ory_kratos_session cookie" # expected WARN log lines indicating invalid auth header
     EXCLUDED_ERRORS="$EXCLUDED_ERRORS|Static assets preprocessor only supports GET and HEAD requests" # expected WARN log lines indicating invalid auth header
+    EXCLUDED_ERRORS="$EXCLUDED_ERRORS|respondError"                 # respondError is a function name, output via http middleware as standard request logging
 fi
 
 if [[ $EXCLUDE_KNOWN_ERRORS == 'Y' ]]; then

salt/soc/defaults.yaml

@@ -1634,13 +1634,6 @@ soc:
           database: securityonion
           user: ""
           password: ""
-        postgresmetrics:
-          host: ""
-          port: 5432
-          sslMode: "require"
-          database: telegraf
-          user: ""
-          password: ""
         salt:
           queueDir: /opt/sensoroni/queue
           timeoutMs: 45000