Commit graph

200 commits

Author SHA1 Message Date
Matteo Biscosi
5edfdeedcd Fixes various lua memory issues 2024-02-22 11:22:52 +00:00
Matteo Biscosi
ef27b0b058 Fixes circular dependency and lightened some modules 2024-02-21 10:44:16 +00:00
Luca Deri
ab34197603 Various script fixed
Improved error message when scripts fail
2024-02-19 22:13:01 +01:00
Matteo Biscosi
e597e83e15 Removed and fixes some dependencies 2024-02-19 12:38:56 +00:00
Matteo Biscosi
dbf4bf2a2b Removed useless imports in lua code upping the memory usage 2024-02-15 15:21:40 +00:00
Nicolo Maio
ce57eef578 Optimize the getter of the alert category using its ID (#8204) 2024-02-06 18:35:47 +01:00
Nicolo Maio
0ad7ad465c Fix ntopng URLs in SNMP alert description (#8183) 2024-01-22 14:53:38 +01:00
Alfredo Cardigliano
e8f10f0795 Add Alert:set_category for host/flow lua alerts with no check definition in lua 2023-11-28 12:30:53 +01:00
Alfredo Cardigliano
bee2b6d838 Fix alert message format (#7969) 2023-11-02 12:52:00 +01:00
Alfredo Cardigliano
e76f7e7f9e Set full severity name. Code cleanup. (#7969) 2023-11-02 11:58:31 +01:00
Matteo Biscosi
e2920b892a Removed debug print 2023-10-04 14:59:18 +00:00
Matteo Biscosi
62c4b5f244 Fixes host alert exclusions not working (#7820) 2023-10-04 09:57:24 +00:00
Alfredo Cardigliano
db17a47e8a Fix syslog endpoint. Add logging of bad severity. 2023-09-27 10:44:33 +02:00
Alfredo Cardigliano
4cfb9591c7 Support 'all' page in the alerts explorer showing historical and acknowledged alerts 2023-06-22 09:13:41 +02:00
Alfredo Cardigliano
6760c2bb77 Fix formatting of quota exceeeded alert 2023-05-19 15:57:38 +02:00
Alfredo Cardigliano
93ec0db5d0 Fix alert format 2023-05-15 10:47:52 +02:00
Nicolò Maio
378232f808
Update alert score threshold with flows info (#6714) (#7197) 2023-02-03 11:36:19 +01:00
MatteoBiscosi
e0b3682bba Removed no more used severity 2022-10-25 10:51:17 +02:00
MatteoBiscosi
692ae0bfcc Added critical and emergency status to alerts 2022-10-19 10:18:51 +02:00
MatteoBiscosi
52c316d214 Removed non standard connotations (#6878) 2022-10-17 15:53:36 +02:00
Luca Deri
be90bf50df Optimized pools lock/unlock removing redis with a lock in ntopng 2022-09-05 20:00:29 +02:00
Luca
74f03c3a38 Added script tracings 2022-08-30 19:32:05 +02:00
MatteoBiscosi
3f214341ea Added traceback in case of nil score 2022-07-20 13:14:49 +02:00
Alfredo Cardigliano
4fe46f0e6d Support match on 'all' alert for alert exclusion 2022-05-31 11:31:30 +02:00
MatteoBiscosi
51ad48fdd4 Fixes status icons not consistent (#6545) 2022-04-27 11:21:04 +02:00
MatteoBiscosi
59069bf4bd Fixes live flows not having alert badge 2022-04-26 15:49:35 +02:00
MatteoBiscosi
5ad4d108f0 Fixes row score color 2022-03-18 12:34:35 +01:00
MatteoBiscosi
f03161a46a Reverted alert_severity default to error 2022-03-16 11:25:06 +01:00
MatteoBiscosi
fa96e1d03f Fixes alert severity not correctly shown with 0 score 2022-03-15 15:50:23 +01:00
MatteoBiscosi
57a85de50e Cleaned up the code from plugin_utils 2022-02-11 12:07:23 +01:00
Alfredo Cardigliano
b24338ca27 Do not cut alert name 2021-12-30 09:40:25 +01:00
Simone Mainardi
d2a28ac1b6 Fixes cerain alert descriptions and types missing 2021-09-20 14:23:37 +02:00
Simone Mainardi
98bebc850c Fixes dynamic loading of Lua flow risk alerts
Addresses #5743
2021-09-15 16:11:09 +02:00
Simone Mainardi
fef7723445 Implements dynamic loading of flow risk alerts in Lua
Addresses #5743
2021-09-15 13:57:43 +02:00
Simone Mainardi
5a0771e06c Adds checks for missing table 'meta' upon alerts load 2021-08-03 14:38:30 +02:00
Simone Mainardi
91b533a625 Fixes load of alerts under Windows 2021-08-03 12:56:36 +02:00
Simone Mainardi
4258637dc9 Shortens alert labels too long (in html mode) 2021-07-09 10:42:41 +02:00
Simone Mainardi
132dccf362 Implements filter to see acknowledged alerts
Addresses #5600
2021-07-06 14:26:25 +02:00
Simone Mainardi
feb65be1ca Implements acknowledged alerts
Implements #5600
2021-07-02 14:58:38 +02:00
MatteoBiscosi
47497ca666 Fixes behavior anomaly alert key not found 2021-06-23 22:55:08 +02:00
Alfredo Cardigliano
279ed66deb Add alert type filter for all families 2021-06-23 12:53:20 +02:00
Alfredo Cardigliano
2acca71f1d Use meaningful param names 2021-06-09 16:29:26 +00:00
Simone Mainardi
0f5340e1a3 (C) update 2021-05-31 12:39:02 +02:00
Alfredo Cardigliano
30e0bd8675 Add ability to filter by alert type (#5292) 2021-05-14 15:23:28 +02:00
Simone Mainardi
a743a1604d Unifies names across alerts, pools and user scripts
Fixes #5311
2021-05-12 10:07:26 +02:00
Simone Mainardi
457af5d222 Fixes flapping of Lua-triggered engaged alerts
Fixes #5304
2021-05-10 15:18:19 +02:00
Simone Mainardi
602ea765e2 Fixes and updates for score and severity 2021-05-05 10:34:39 +02:00
gabryon99
34269c8b43 various fixes on alert page (#5230, #5231) 2021-04-28 12:22:37 +02:00
Simone Mainardi
c7082a4647 Implements new alerts database and drilldown
alert store skeleton

Alert database type changes

Implement alert store for host alerts. All alert store skeletons.

Fix class method access

Enable tracing

Implements simple queries for host alerts

Implement flow alert store

Fixes escaping of INSERT queries

Flow alerts database schema fixes

Adds escaping for alert JSON in flows and hosts

Implements queries .select() for alerts store

Adds limit and offset to perform paginated queries

Adds new REST getter for flow alerts

Name changes alert_severity to severity, alert_json to json

Fixes alert message not shown

Implement active monitoring alerts store

Implements sort of queries in the new dataabase

Changes alert_type to alert_id

Implement mac alerts store

Fixes flow alert messages

Implement system alerts store

Implement snmp alert store

Add missing items to the flow alerts

Add missing items to the host alerts

Add missing items to the mac alerts

Implements COUNT aplerts api

Add device_name to snmp alerts

add flow alerts templates

updated gitignore

fix for missing order field

add families defined in `alert_store_schema.sql`

Reworks and simplifies alert store subclasses

Implements REST API to fetch alert timeseries

Fixes date in flow REST api

Host alert json fix

Add get/host/alert/list.lua

Move alert/list.lua to alert/past/list.lua

Add alert/past/list.lua for all alert families

Add entity_id to system table to identify the alert type based on <alert_id, entity_id>

Add missing field

Implements facilities to query engaged alerts via REST

Handle both historical and past alerts in alert/list.lua

Fix count

Update params of select_historical

Implement method to add family-specific filters

Add alert/ts.lua for all alert families

Implements facilities and REST endpoints to delete alerts

Implements ordering of alert queries

Fix add_order_by group_by

Rest API tests update

Tests output update

Remove debug trace

Use alert_id instead of type. Add more flow alert info.

Update http lint

Format obsolete tlv version alerts. Add more host info.

Add row_id to list of alerts

Fix selection of engaged alerts

Add test for mac alerts (bcast domains)

Removes attempt to format alerts as flow alerts

Fixes interface selection for active monitoring

Update test output with rest changes

Add more fields to be ignores

Set alert count to 1 for the time being

add bar timeseries chart

add apexcharts

improvements on timeseries bar chart

registered chart callbakcs

working on alert page

fix for date format

Fixes acrive monitoring REST API

Fixes alignment of grouped alert data

Additional fix for alert histogram

remove useless if

formatting alerts page

fixes on flows alert stats table

rename local networks to device

format host pagie in alert_stats

add tag support for hosts and flow

implemented single delete action

add release modal

Fixes format of threshold cross interface alerts

Fixes wrong increase of dropped alerts

Implements exclusion list for invalid dns queries

Reworks exclusions lists for hosts and flows

Addresses #5212
Addresses #5113

Adds host alert keys in host callbacks definitions

Adds alert ids to flow callbacks

fix for not working button (#5215)

Fixes reported timeseries name

removed any additional button inside chart's toolbar (#5200)

Add tables for interfaces, networks, users to the schema. Skeleton alert_store classes

fixed broken range picker layout in firefox (#5199)

Alert insert fixes

Add more info to network alerts

Add rest endpoint for interface, network, user alerts

Fix endpoint selection in alerts_stats

Unifies columns between engaged and past alerts

Fixes Missing mandatory 'alert_granularity'

Minor fixes for missing alert_severity

Fixes arithmetic on a nil value (field 'last_seen')

Fixes get/system/alert/list.lua

use tstamp for column names (#5221)

Implements host alert formatter

Add alerts_store format_record_common

Use common format_record for am, system alerts

Use common format_record for all alerts

Fixes formatting of alerts of all types

Fixes nil in function 'hostinfo2label'

fixes on disable modal

add pages for network, user and interface endpoint (#5224)

Set alert_entity in all classes

Unifies influxdb alerts into system alerts

Addresses #5224

Unifies process alerts into system alerts

Addresses #5224

Cleanup unused periodicActivityEntity

Unifies category lists alerts into system alerts

Addresses #5224

Aligns new alert enums

Addresses #5224

Fixes alert page links

Fixes insertion of interface alerts

Implement filters for Host alerts

Fixes active monitoring alerts not triggering

Implement filters on flow alerts

Fixes for internal alerts timestamp and subtype

implements disable for the alerts

formatted alert disable label

Add address and device type to mac alert records

fix for delete alert toggle

Fix access to entity_val in alert_unexpected_new_device

add mac address and device type inside table

Fixes for new alert fields not handled

Fixes alert_definitions to handle new fields

Add ip/port to snmp alert records

Implements deletion of stored flow alerts

Add alert_name to all alert records via rest. Fix duration.

fixes for snmp tab

Implements delete of past host alerts

Add name to snmp alert records

fixes on system tab

Fix Date column

fixes link

Update menu

Fixes bad argument #3 to 'format' in snmp alerts

updated interface link

new alerts url for host (#5228)

Fixes sort of engaged alert

Minor cleanup

Fixes data returned for local network alerts

Fix duration for one shot. Note.

Fix duration override

Fixes interface selection for system alerts

Move host alert page

fixes for local network tab

Minor fix

Fix engaged host alerts

fixes on user tab

Fix alert_user_activity message
2021-04-26 19:41:34 +02:00
Simone Mainardi
b12fc91a6b Merge branch 'host-user-scripts' into dev 2021-04-03 10:18:09 +02:00