default to tunnel lookup enabled for now

Security-Onion-Solutions · Feb 12, 2024 · 2f0154f · 2f0154f
1 parent c5bf963
commit 2f0154f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/modules/elastic/elastic.go b/server/modules/elastic/elastic.go
@@ -67,7 +67,7 @@ func (elastic *Elastic) Init(cfg module.ModuleConfig) error {
 	intervals := module.GetIntDefault(cfg, "intervals", DEFAULT_INTERVALS)
 	maxLogLength := module.GetIntDefault(cfg, "maxLogLength", DEFAULT_MAX_LOG_LENGTH)
 	casesEnabled := module.GetBoolDefault(cfg, "casesEnabled", true)
-	lookupTunnelParent := module.GetBoolDefault(cfg, "lookupTunnelParent", false)
+	lookupTunnelParent := module.GetBoolDefault(cfg, "lookupTunnelParent", true)
 	err := elastic.store.Init(host, remoteHosts, username, password, verifyCert, timeShiftMs, defaultDurationMs,
 		esSearchOffsetMs, timeoutMs, cacheMs, index, asyncThreshold, intervals, maxLogLength, lookupTunnelParent)
 	if err == nil && elastic.server != nil {