Luca Deri
|
4f1451c021
|
Handled where clause in historical queries
|
2022-12-29 21:44:53 +01:00 |
|
Luca Deri
|
587cde6f27
|
Firxed alert store queries when group_by is used
|
2022-12-28 21:23:37 +01:00 |
|
Luca Deri
|
d596c5ee16
|
Improved alert analyser
|
2022-12-28 18:00:57 +01:00 |
|
Alfredo Cardigliano
|
4feb9ef4d9
|
Cleanup debug print
|
2022-12-23 18:57:09 +01:00 |
|
Alfredo Cardigliano
|
bc8fb50ce7
|
Improve Engaged Time Report in Chart (#7066)
|
2022-12-23 18:55:52 +01:00 |
|
MatteoBiscosi
|
52c316d214
|
Removed non standard connotations (#6878)
|
2022-10-17 15:53:36 +02:00 |
|
Alfredo Cardigliano
|
fa68eadef0
|
Add supprot for filtering alerts on probe ip and interface (#6809)
|
2022-08-22 16:39:35 +02:00 |
|
Alfredo Cardigliano
|
8f991db0f3
|
Show System alerts in interfaces also with SQLite (fix #6498)
|
2022-08-02 11:20:17 +02:00 |
|
MatteoBiscosi
|
3f214341ea
|
Added traceback in case of nil score
|
2022-07-20 13:14:49 +02:00 |
|
Alfredo Cardigliano
|
4413f41b65
|
Cleanup code for json field lookup
|
2022-06-17 09:56:50 +02:00 |
|
MatteoBiscosi
|
98f39db18b
|
Added traffic direction filter to alerts (#6666)
|
2022-06-14 16:21:40 +02:00 |
|
Alfredo Cardigliano
|
f6cb982355
|
Fix alert_store housekeeping
|
2022-05-30 11:43:18 +02:00 |
|
Alfredo Cardigliano
|
21530068a9
|
Add get_table_name / get_write_table_name to alert store
|
2022-05-30 11:25:32 +02:00 |
|
Alfredo Cardigliano
|
5b0e59b50c
|
Fix hostname match in engaged alerts
|
2022-05-24 15:34:53 +02:00 |
|
MatteoBiscosi
|
344946be8f
|
Fixes non working info field filtering (#6564)
|
2022-05-20 16:25:02 +02:00 |
|
Alfredo Cardigliano
|
d248d2a158
|
Handle IPv4 vs IPv6 columns when writing to the flow alerts table using a view
|
2022-05-11 16:16:23 +02:00 |
|
Alfredo Cardigliano
|
7025b3dd5b
|
Fix string to numeric IP conversion in flow alerts
|
2022-05-11 15:46:39 +02:00 |
|
Alfredo Cardigliano
|
8651e089a1
|
Handle write operation on flow alerts with clickhouse view
|
2022-05-09 17:49:48 +02:00 |
|
Alfredo Cardigliano
|
2f0ba125da
|
Add support for 'write' columns which differ from 'view' columns when building where conditions
|
2022-05-09 14:37:13 +02:00 |
|
Alfredo Cardigliano
|
740102dc22
|
Engaged alerts are always active by definition, ignore begin epoch
|
2022-04-20 16:26:10 +02:00 |
|
Alfredo Cardigliano
|
ea29fc8176
|
Support hostname@vlan in alert filters
|
2022-04-19 18:11:17 +02:00 |
|
Alfredo Cardigliano
|
da88d0ca8f
|
Support match on name/cli_name/srv_name including vlan
|
2022-04-13 18:50:57 +02:00 |
|
Alfredo Cardigliano
|
673a7cf971
|
Add alert gateway_unreachable
|
2022-04-07 19:33:52 +02:00 |
|
Alfredo Cardigliano
|
669d8ee611
|
Fix l7 filter with Unknown value
|
2022-03-31 18:26:55 +02:00 |
|
Alfredo Cardigliano
|
e140424716
|
Add SNMP and Active Monitoring tags to interface alerts
|
2022-03-28 15:03:36 +02:00 |
|
Alfredo Cardigliano
|
be5bf4e479
|
Use DB conversion function for timestamps, instead of parsing the date in lua
|
2022-03-21 11:53:30 +01:00 |
|
Alfredo Cardigliano
|
949127cfd4
|
Rename general_stats.lua -> top.lua in API v2
|
2022-03-18 10:05:27 +01:00 |
|
Alfredo Cardigliano
|
5e15f44269
|
Cleanup debug print
|
2022-03-16 11:32:44 +01:00 |
|
Alfredo Cardigliano
|
ca189ea4fd
|
Always use tstamp as part of the query to avoid full scans (#6422)
|
2022-03-16 11:23:56 +01:00 |
|
Alfredo Cardigliano
|
873fad2966
|
Use first_seen instead of tstamp for flow alerts lookups
|
2022-03-14 18:44:06 +01:00 |
|
uccidibuti
|
f5598decc0
|
Wrong Alert Default Sort #6339
|
2022-03-01 17:43:32 +01:00 |
|
Alfredo Cardigliano
|
c5e4ec2217
|
Fix L7 filters for flow alerts (usa same key used for flows)
|
2022-03-01 16:34:05 +01:00 |
|
Alfredo Cardigliano
|
6c9dd9f7df
|
Support 'contains' op in alerts
|
2022-02-22 16:32:20 +01:00 |
|
Alfredo Cardigliano
|
9bd30a049a
|
Do not print nil for empty values
|
2022-02-22 15:55:50 +01:00 |
|
Alfredo Cardigliano
|
90b7c5fd91
|
Do not print nil for empty values
|
2022-02-22 15:25:42 +01:00 |
|
Alfredo Cardigliano
|
d527b88347
|
Improve alert sql generation for l7 proto
|
2022-02-17 12:38:53 +01:00 |
|
Alfredo Cardigliano
|
e0d41a0167
|
Move definition of alert tags and cleanup declarations
|
2022-02-14 12:55:20 +01:00 |
|
Alfredo Cardigliano
|
bcf3c053ce
|
Rework rest API for alert stats
|
2022-01-26 10:00:20 +01:00 |
|
Alfredo Cardigliano
|
cc81975441
|
Add get_top_limit and format_top_alerts to alert_store
|
2022-01-25 11:04:46 +01:00 |
|
Luca Deri
|
fd559d1859
|
Added further escape check in flow export
|
2022-01-24 22:06:59 +01:00 |
|
Alfredo Cardigliano
|
e9d79d9e1a
|
Fix alert query
|
2022-01-24 17:02:30 +01:00 |
|
Alfredo Cardigliano
|
27090de5c7
|
Add processed records and performance for alerts. Fix processed stats for flows.
|
2022-01-21 18:11:33 +01:00 |
|
Luca Deri
|
a5912438f8
|
Added epoch_begin and epoch_end in /lua/rest/v2/get/flow/alert/list.lua
|
2022-01-13 21:40:57 +01:00 |
|
Alfredo Cardigliano
|
a3bce393ca
|
Remove duplicated i18n tag fields. Add info tag definition.
|
2022-01-11 10:48:52 +01:00 |
|
Luca
|
bbcd1d011b
|
Added fix for converting alerts_map with SQLite to a meaningful value
being it stored as BLOB
|
2022-01-10 12:40:45 +01:00 |
|
Alfredo Cardigliano
|
257ece18c0
|
Copyright update (Lua)
|
2022-01-03 09:42:33 +01:00 |
|
Alfredo Cardigliano
|
b242ec2975
|
Alert details page. Stub functions for label/details functions in alert store.
|
2021-12-28 16:01:30 +01:00 |
|
Simone Mainardi
|
01256e21ec
|
Fixes parse input errors for the system interface alerts
Addresses #6115
|
2021-12-24 14:26:59 +01:00 |
|
MatteoBiscosi
|
46c98aa90d
|
Fixes incorrect system interface id used (#6136)
|
2021-12-15 15:37:48 +01:00 |
|
Alfredo Cardigliano
|
d9fc8b0284
|
Update locale
|
2021-11-25 11:43:32 +01:00 |
|