292 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	08755d8518	Add comment on flow alerts tstamp	2022-03-21 11:05:15 +01:00
MatteoBiscosi	8076d02386	Fixes flow alert proto info not working correctly (#6449)	2022-03-21 10:49:07 +01:00
Alfredo Cardigliano	949127cfd4	Rename general_stats.lua -> top.lua in API v2	2022-03-18 10:05:27 +01:00
MatteoBiscosi	fc062bedd4	Added flow related info to alert details	2022-03-17 16:30:26 +01:00
MatteoBiscosi	fb657480c3	Added mapping for DNS and HTTP (#6424) and removed duplicated info (#6425)	2022-03-17 11:30:20 +01:00
Alfredo Cardigliano	c2fa3d5b77	Add vlan to available filters for host alerts	2022-03-17 10:55:47 +01:00
Alfredo Cardigliano	bfeb1f3563	Use first_seen with clickhouse and tstamp for sqlite in flow queries	2022-03-16 12:17:51 +01:00
Alfredo Cardigliano	897fb7ca34	Add vlan filter on host alerts	2022-03-16 12:06:43 +01:00
Alfredo Cardigliano	0da61c83e5	Fix VLAN in host alerts	2022-03-16 11:57:05 +01:00
Alfredo Cardigliano	5e15f44269	Cleanup debug print	2022-03-16 11:32:44 +01:00
Alfredo Cardigliano	ca189ea4fd	Always use tstamp as part of the query to avoid full scans (#6422)	2022-03-16 11:23:56 +01:00
Alfredo Cardigliano	873fad2966	Use first_seen instead of tstamp for flow alerts lookups	2022-03-14 18:44:06 +01:00
MatteoBiscosi	a96231e96f	Fixes invalid host formatting (#6391)	2022-03-14 13:24:06 +01:00
MatteoBiscosi	702bd0441a	Removed remote access alert local to local	2022-03-11 17:34:27 +01:00
Alfredo Cardigliano	780eb6cc14	Handle vlan as separate field	2022-03-11 17:33:26 +01:00
Alfredo Cardigliano	aa44695988	Split host and vlan in flow alerts	2022-03-11 11:59:33 +01:00
Alfredo Cardigliano	2900b0a405	Add VLAN filter in flow alerts. Add Alertsicon in search results	2022-03-11 11:01:40 +01:00
MatteoBiscosi	9f6e6ed946	Fixes TLS certificate time format (#6361)	2022-03-07 11:00:08 +01:00
uccidibuti	f5598decc0	Wrong Alert Default Sort #6339	2022-03-01 17:43:32 +01:00
Alfredo Cardigliano	c5e4ec2217	Fix L7 filters for flow alerts (usa same key used for flows)	2022-03-01 16:34:05 +01:00
Alfredo Cardigliano	7b2db43e32	Fix Active Monitoring link to Settings	2022-02-24 12:10:39 +01:00
Alfredo Cardigliano	6c9dd9f7df	Support 'contains' op in alerts	2022-02-22 16:32:20 +01:00
Alfredo Cardigliano	9bd30a049a	Do not print nil for empty values	2022-02-22 15:55:50 +01:00
Alfredo Cardigliano	90b7c5fd91	Do not print nil for empty values	2022-02-22 15:25:42 +01:00
Alfredo Cardigliano	d527b88347	Improve alert sql generation for l7 proto	2022-02-17 12:38:53 +01:00
Alfredo Cardigliano	be72968ab8	Fix rowid generation for alerts on clickhouse	2022-02-17 12:14:52 +01:00
Alfredo Cardigliano	3aeed99115	Improve flow alert to historical flow lookup	2022-02-14 17:27:13 +01:00
Alfredo Cardigliano	acdf0aa7be	Add missing require	2022-02-14 15:07:03 +01:00
Alfredo Cardigliano	e0d41a0167	Move definition of alert tags and cleanup declarations	2022-02-14 12:55:20 +01:00
MatteoBiscosi	57a85de50e	Cleaned up the code from plugin_utils	2022-02-11 12:07:23 +01:00
Matteo Biscosi	a4ebf5345e	Fixes filter to alert page not working from alert info page	2022-02-02 11:46:03 +01:00
Alfredo Cardigliano	5c3a838086	Avoid shortening descriptions in the backend	2022-01-27 11:29:20 +01:00
Alfredo Cardigliano	359c0e3621	Add cli/srv alert stats	2022-01-26 10:20:13 +01:00
Alfredo Cardigliano	bcf3c053ce	Rework rest API for alert stats	2022-01-26 10:00:20 +01:00
Alfredo Cardigliano	cc81975441	Add get_top_limit and format_top_alerts to alert_store	2022-01-25 11:04:46 +01:00
Luca Deri	fd559d1859	Added further escape check in flow export	2022-01-24 22:06:59 +01:00
Alfredo Cardigliano	e9d79d9e1a	Fix alert query	2022-01-24 17:02:30 +01:00
Alfredo Cardigliano	27090de5c7	Add processed records and performance for alerts. Fix processed stats for flows.	2022-01-21 18:11:33 +01:00
Simone Mainardi	705807ad9d	Reworks active monitoring plugin structure	2022-01-21 12:21:44 +01:00
Alfredo Cardigliano	d191d59d59	Set flow alert first seen	2022-01-18 15:35:21 +01:00
Alfredo Cardigliano	5406eb004d	Move pcap download dialog. Cleanup filter generation.	2022-01-18 11:28:35 +01:00
Alfredo Cardigliano	697988f6c1	Extend time range for alert pcap filter	2022-01-17 19:24:00 +01:00
Alfredo Cardigliano	2c561072ff	Add download of pcap matching alert traffic	2022-01-17 17:56:14 +01:00
Luca Deri	a5912438f8	Added epoch_begin and epoch_end in /lua/rest/v2/get/flow/alert/list.lua	2022-01-13 21:40:57 +01:00
Luca Deri	59f2c0d387	Removed alert trace	2022-01-13 15:52:19 +01:00
Alfredo Cardigliano	167d2c9d71	Update tests (l7 apps / cats)	2022-01-13 14:39:48 +01:00
Alfredo Cardigliano	a3bce393ca	Remove duplicated i18n tag fields. Add info tag definition.	2022-01-11 10:48:52 +01:00
Luca	bbcd1d011b	Added fix for converting alerts_map with SQLite to a meaningful value ... being it stored as BLOB	2022-01-10 12:40:45 +01:00
MatteoBiscosi	fbda39209a	Added extra application info to alerts	2022-01-05 18:50:09 +01:00
Alfredo Cardigliano	257ece18c0	Copyright update (Lua)	2022-01-03 09:42:33 +01:00