update scripts

elastic · Apr 17, 2020 · fd3d96b · fd3d96b
1 parent 47f1081
commit fd3d96b
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/...ck/legacy/plugins/siem/server/lib/detection_engine/scripts/rules/patches/update_list.json b/...ck/legacy/plugins/siem/server/lib/detection_engine/scripts/rules/patches/update_list.json
@@ -1,6 +1,6 @@
 {
   "rule_id": "query-with-list",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "source.ip",
       "values_operator": "excluded",

diff --git a/...egacy/plugins/siem/server/lib/detection_engine/scripts/rules/queries/query_with_list.json b/...egacy/plugins/siem/server/lib/detection_engine/scripts/rules/queries/query_with_list.json
@@ -6,7 +6,7 @@
   "severity": "high",
   "type": "query",
   "query": "user.name: root or user.name: admin",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "source.ip",
       "values_operator": "included",

diff --git a/...ck/legacy/plugins/siem/server/lib/detection_engine/scripts/rules/updates/update_list.json b/...ck/legacy/plugins/siem/server/lib/detection_engine/scripts/rules/updates/update_list.json
@@ -6,7 +6,7 @@
   "severity": "high",
   "type": "query",
   "query": "user.name: root or user.name: admin",
-  "lists": [
+  "exceptions_list": [
     {
       "field": "source.ip",
       "values_operator": "excluded",