Merge pull request #16122 from Security-Onion-Solutions/cogburn/gemma-mapping

Investigator and Engineer Use Gemma
2026-07-29 12:13:26 +02:00 · 2026-07-28 11:12:24 -06:00 · 2026-07-28 10:26:29 -06:00 · 2026-07-28 10:21:49 -06:00 · 2026-07-28 10:19:18 -06:00 · 2026-07-27 12:18:47 -04:00
1 changed files with 13 additions and 3 deletions
@@ -1534,9 +1534,9 @@ soc:
              healthTimeoutSeconds: 5
          agentic: false
          agentMapping:
-            Orchestrator: Claude Sonnet
-            Investigator: Claude Sonnet
-            DetectionEngineer: Claude Sonnet
+            Orchestrator: sonnet@SOAI
+            Investigator: gemma@SOAI
+            DetectionEngineer: gemma@SOAI
        onionconfig:
          saltstackDir: /opt/so/saltstack
          bypassEnabled: false
@@ -2718,4 +2718,14 @@ soc:
              enabled: true
              adapter: SOAI
              charsPerTokenEstimate: 4
+            - id: gemma
+              displayName: Gemma
+              origin: USA
+              contextLimitSmall: 256000
+              contextLimitLarge: 256000
+              lowBalanceColorAlert: 500000
+              enabled: true
+              adapter: SOAI
+              charsPerTokenEstimate: 4
+
Author	SHA1	Message	Date
coreyogburnandGitHub	7b080797b4	Merge pull request #16122 from Security-Onion-Solutions/cogburn/gemma-mapping Investigator and Engineer Use Gemma	2026-07-28 11:12:24 -06:00
Corey Ogburn	d94c16eea1	Investigator and Engineer Use Gemma	2026-07-28 10:26:29 -06:00
coreyogburnandGitHub	3e3d409c42	Merge pull request #16121 from Security-Onion-Solutions/cogburn/update-agentmapping-defaults Change defaults	2026-07-28 10:21:49 -06:00
Corey Ogburn	a45ca12076	Change defaults We're no longer using DisplayName as the model identifier. Refactored to use id@adapter.	2026-07-28 10:19:18 -06:00
Mike ReevesandGitHub	2e141a1ad7	Merge pull request #16119 from Security-Onion-Solutions/TOoSmOotH-patch-3 Add Gemma configuration to defaults.yaml	2026-07-27 12:18:47 -04:00
Mike ReevesandGitHub	4de8f0208f	Add Gemma configuration to defaults.yaml	2026-07-27 12:15:21 -04:00
Josh BrowerandGitHub	4aabf7d638	Merge pull request #16118 from Security-Onion-Solutions/playbooks-airgap Support sigma playbooks for airgap	2026-07-27 16:33:51 +02:00