111 commits

Author	SHA1	Message	Date
Simone Mainardi	190a43c095	Fixes link for the all alerts page ... Addresses #5486	2021-06-11 09:39:16 +02:00
Simone Mainardi	6e5d5ff5eb	Disables empty alert pages, reworks historical/engaged links ... Addresses #5486	2021-06-11 09:33:09 +02:00
Alfredo Cardigliano	e1b9723809	Add extended description to host alerts	2021-06-10 12:16:03 +02:00
Matteo Biscosi	8179d4749a	Added host name to alert select	2021-06-09 11:46:10 +02:00
Alfredo Cardigliano	1c50397e5b	Add tot count to alert_store get_stats	2021-06-09 08:41:04 +00:00
Matteo Biscosi	a35873d484	Moved new alert dashboards rests into pro version	2021-06-07 19:24:05 +02:00
lucapruneti	33a89e993e	CSV Export (#5445) ... * Change host alert function name to json * Refactored *_alert_store function with format_json, added csv format tohost alert * Added .vscode directory to gitignore * Refactor alert_store:to_csv function to single loop format * Removed no_data value for no records in alert csv download * Implemented csv export for alerts * Merge with dev * Removed row_id alert field to be exported in csv * Refactored alert/*/list.lua with simple decision value format construct * Refactored alerts csv export * Fix removed output test files * Added alert csv export for subdocuments * Modified gitignore * Change MSG values to export in alerts * Added flow information in alert export * Added export msg.description for alert	2021-06-04 18:10:26 +02:00
lucapruneti	1338d0956d	Download Alerts Improvements in CSV format (#5442) ... * Change host alert function name to json * Refactored *_alert_store function with format_json, added csv format tohost alert * Added .vscode directory to gitignore * Refactor alert_store:to_csv function to single loop format * Removed no_data value for no records in alert csv download * Implemented csv export for alerts * Merge with dev * Removed row_id alert field to be exported in csv * Refactored alert/*/list.lua with simple decision value format construct * Refactored alerts csv export * Fix removed output test files * Added alert csv export for subdocuments * Modified gitignore * Change MSG values to export in alerts	2021-06-04 10:03:19 +02:00
lucapruneti	fc7efc2a0c	issue_5404_download_alert_format-inconsistent (#5433) ... * Change host alert function name to json * Refactored *_alert_store function with format_json, added csv format tohost alert * Added .vscode directory to gitignore * Refactor alert_store:to_csv function to single loop format * Removed no_data value for no records in alert csv download * Implemented csv export for alerts * Merge with dev * Removed row_id alert field to be exported in csv * Refactored alert/*/list.lua with simple decision value format construct * Refactored alerts csv export * Fix removed output test files * Added alert csv export for subdocuments * Modified gitignore	2021-06-04 08:49:31 +02:00
Matteo Biscosi	a616a8f06f	Changed name value and fixed self nil value	2021-06-03 17:39:13 +02:00
Alfredo Cardigliano	f6f089c69e	Add top mac and networks by alert count	2021-06-03 15:12:37 +02:00
Alfredo Cardigliano	5d294f7cab	Add get_stats function to comput top alerts, hosts, cli/srv hosts from historical stats	2021-06-01 18:25:40 +02:00
Alfredo Cardigliano	ee7c012926	Handle operators in (view only) tags	2021-06-01 10:53:46 +02:00
Alfredo Cardigliano	cfdf371ab5	Support lt/gt operators in alert severity	2021-06-01 09:59:54 +02:00
Simone Mainardi	0f5340e1a3	(C) update	2021-05-31 12:39:02 +02:00
Simone Mainardi	08fb295be9	Implements support for roles (attacker/victim) filtering of alerts ... Implements #5425	2021-05-31 12:32:56 +02:00
Simone Mainardi	9453fca4cb	Reworks and completes attacker/victim for all host alerts ... Addresses #5310	2021-05-31 11:17:03 +02:00
Alfredo Cardigliano	72d6cc5e38	Add hyperlinks to alert numbers (implement #5334)	2021-05-28 15:56:33 +02:00
Matteo Biscosi	8d789023c7	Fixed alert views chart error	2021-05-28 12:18:56 +02:00
Simone Mainardi	0c9404bacc	Removes a debug print	2021-05-27 15:19:05 +02:00
Simone Mainardi	567655ad70	Fixes for active monitoring alerts ... Fixes #5415	2021-05-27 15:18:10 +02:00
Simone Mainardi	0657eb6c9f	Reworks flow alerts UI, filters, and unifies terminology ... Fixes #5331	2021-05-26 15:56:00 +02:00
Alfredo Cardigliano	ba67279074	Fix formatters	2021-05-25 12:57:50 +02:00
Alfredo Cardigliano	a097c85052	Remove attacker2victim/victim2attacker columns. Add icons for attacker/victim. Add has_attacker/has_victim fitlers. (fix #5302)	2021-05-25 12:42:44 +02:00
Alfredo Cardigliano	c3dfe67eb5	Add l7 proto and roles to flow alert filters	2021-05-17 14:23:18 +02:00
Matteo Biscosi	d06cd70c7b	Fixed alert page crashing due to pro import	2021-05-17 12:01:00 +02:00
Alfredo Cardigliano	32585a34d0	Fix query on attacker/victim	2021-05-17 09:51:59 +02:00
Alfredo Cardigliano	c8731f5bfa	Add filter support for host role (attacker/victim)	2021-05-14 19:37:56 +02:00
Alfredo Cardigliano	026571e6a7	Move all render code to datatable-utils. Cleanup attacker/victim rendering.	2021-05-14 19:01:39 +02:00
Alfredo Cardigliano	206f1bb608	Move 'add filter' button to the tags bar. Fix filter dialog for all families (#5292)	2021-05-14 15:53:30 +02:00
Alfredo Cardigliano	30e0bd8675	Add ability to filter by alert type (#5292)	2021-05-14 15:23:28 +02:00
Alfredo Cardigliano	f1c343ed83	Add cli/srv ip/port filters to flow alerts, ip filter to host alerts (#5292)	2021-05-14 11:15:08 +02:00
Alfredo Cardigliano	064c20db29	Implement support for alert filters using a dialog (WIP)	2021-05-13 19:02:28 +02:00
Simone Mainardi	bc6008be28	Reports all alerts inside a flow alert (not jsut the predominant) ... Implements #5316	2021-05-13 15:51:05 +02:00
Simone Mainardi	b7f12727e2	Implements spillover description column for flow alerts	2021-05-12 18:43:12 +02:00
Alfredo Cardigliano	b784ffa90c	Return an empty series when there are no alerts	2021-05-12 11:45:13 +02:00
Simone Mainardi	a743a1604d	Unifies names across alerts, pools and user scripts ... Fixes #5311	2021-05-12 10:07:26 +02:00
Simone Mainardi	bb3f8ed168	Implements efficient unexpected_new_device alert	2021-05-11 19:03:40 +02:00
Alfredo Cardigliano	03bf2bca5e	Fix attacker/victim records	2021-05-11 18:52:09 +02:00
Alfredo Cardigliano	bd190c22d1	Set record family when it applies	2021-05-11 18:13:48 +02:00
Alfredo Cardigliano	6c9b546383	Improve alert description for some families	2021-05-11 18:11:10 +02:00
Matteo Biscosi	1fa6159ab2	Implements attacker and victim sorting flow alert table	2021-05-11 17:24:10 +02:00
Alfredo Cardigliano	41b72c1125	Cleanup alert description (move configset link as additional field). Add ellipsis to long descriptions, with tooltips.	2021-05-11 17:18:13 +02:00
Alfredo Cardigliano	f801f86dc6	Add alert type to alert description and ability to filter on alert type for all alert families. (fix #5312)	2021-05-11 14:40:24 +02:00
Simone Mainardi	53ffd160de	Fixes sort by attacker/victim in host page	2021-05-11 14:36:58 +02:00
Alfredo Cardigliano	aea96c3bbc	Fix filter on alert_id	2021-05-11 14:06:07 +02:00
Matteo Biscosi	dd6ed25022	Fixes null value into flow alert page	2021-05-11 13:10:51 +02:00
Matteo Biscosi	c9b08d52a0	Implemented attacker and victim column ... Implements #5310	2021-05-11 12:46:49 +02:00
Alfredo Cardigliano	fc85cc20ef	Add alert name to the description. Add support for filtering on alert type (wip)	2021-05-11 12:33:51 +02:00
Alfredo Cardigliano	3ad0e12795	Add support for cli/srv port filtering in flow alerts	2021-05-10 18:08:42 +02:00