Merge pull request #366 from Security-Onion-Solutions/2.4/detections-…

…brower Change event.module to sigma
Security-Onion-Solutions · Mar 5, 2024 · f49b4b3 · f49b4b3
2 parents d5a59a2 + a1b1e5f
commit f49b4b3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/modules/elastalert/elastalert.go b/server/modules/elastalert/elastalert.go
@@ -875,8 +875,8 @@ func wrapRule(det *model.Detection, rule string) (string, error) {
 	wrapper := &CustomWrapper{
 		PlayTitle:     det.Title,
 		PlayID:        det.Id,
-		EventModule:   "elastalert",
-		EventDataset:  "elastalert.alert",
+		EventModule:   "sigma",
+		EventDataset:  "sigma.alert",
 		EventSeverity: sevNum,
 		RuleCategory:  "", // TODO: what should this be?
 		SigmaLevel:    string(det.Severity),