Map default agents to model displayName, not id

agentMapping values are model displayNames (the canonical selector); the stock config used the model id, which only resolved via the legacy id@adapter fallback. Use the Claude Sonnet displayName so agent-to-model resolution matches the documented contract.
Merge pull request #16084 from Security-Onion-Solutions/postgres-log-password-scrub
2026-07-22 16:55:40 +02:00 · 2026-07-21 15:08:24 -04:00 · 2026-07-20 15:33:05 -04:00
1 changed files with 3 additions and 3 deletions
@@ -1530,9 +1530,9 @@ soc:
              healthTimeoutSeconds: 5
          agentic: false
          agentMapping:
-            Orchestrator: sonnet
+            Orchestrator: Claude Sonnet
-            Investigator: sonnet
+            Investigator: Claude Sonnet
-            Detection Engineer: sonnet
+            Detection Engineer: Claude Sonnet
        onionconfig:
          saltstackDir: /opt/so/saltstack
          bypassEnabled: false