Commit graph

144 commits

Author SHA1 Message Date
Luca Deri
4f1451c021 Handled where clause in historical queries 2022-12-29 21:44:53 +01:00
Luca Deri
587cde6f27 Firxed alert store queries when group_by is used 2022-12-28 21:23:37 +01:00
Luca Deri
d596c5ee16 Improved alert analyser 2022-12-28 18:00:57 +01:00
Alfredo Cardigliano
4feb9ef4d9 Cleanup debug print 2022-12-23 18:57:09 +01:00
Alfredo Cardigliano
bc8fb50ce7 Improve Engaged Time Report in Chart (#7066) 2022-12-23 18:55:52 +01:00
MatteoBiscosi
52c316d214 Removed non standard connotations (#6878) 2022-10-17 15:53:36 +02:00
Alfredo Cardigliano
fa68eadef0 Add supprot for filtering alerts on probe ip and interface (#6809) 2022-08-22 16:39:35 +02:00
Alfredo Cardigliano
8f991db0f3 Show System alerts in interfaces also with SQLite (fix #6498) 2022-08-02 11:20:17 +02:00
MatteoBiscosi
3f214341ea Added traceback in case of nil score 2022-07-20 13:14:49 +02:00
Alfredo Cardigliano
4413f41b65 Cleanup code for json field lookup 2022-06-17 09:56:50 +02:00
MatteoBiscosi
98f39db18b Added traffic direction filter to alerts (#6666) 2022-06-14 16:21:40 +02:00
Alfredo Cardigliano
f6cb982355 Fix alert_store housekeeping 2022-05-30 11:43:18 +02:00
Alfredo Cardigliano
21530068a9 Add get_table_name / get_write_table_name to alert store 2022-05-30 11:25:32 +02:00
Alfredo Cardigliano
5b0e59b50c Fix hostname match in engaged alerts 2022-05-24 15:34:53 +02:00
MatteoBiscosi
344946be8f Fixes non working info field filtering (#6564) 2022-05-20 16:25:02 +02:00
Alfredo Cardigliano
d248d2a158 Handle IPv4 vs IPv6 columns when writing to the flow alerts table using a view 2022-05-11 16:16:23 +02:00
Alfredo Cardigliano
7025b3dd5b Fix string to numeric IP conversion in flow alerts 2022-05-11 15:46:39 +02:00
Alfredo Cardigliano
8651e089a1 Handle write operation on flow alerts with clickhouse view 2022-05-09 17:49:48 +02:00
Alfredo Cardigliano
2f0ba125da Add support for 'write' columns which differ from 'view' columns when building where conditions 2022-05-09 14:37:13 +02:00
Alfredo Cardigliano
740102dc22 Engaged alerts are always active by definition, ignore begin epoch 2022-04-20 16:26:10 +02:00
Alfredo Cardigliano
ea29fc8176 Support hostname@vlan in alert filters 2022-04-19 18:11:17 +02:00
Alfredo Cardigliano
da88d0ca8f Support match on name/cli_name/srv_name including vlan 2022-04-13 18:50:57 +02:00
Alfredo Cardigliano
673a7cf971 Add alert gateway_unreachable 2022-04-07 19:33:52 +02:00
Alfredo Cardigliano
669d8ee611 Fix l7 filter with Unknown value 2022-03-31 18:26:55 +02:00
Alfredo Cardigliano
e140424716 Add SNMP and Active Monitoring tags to interface alerts 2022-03-28 15:03:36 +02:00
Alfredo Cardigliano
be5bf4e479 Use DB conversion function for timestamps, instead of parsing the date in lua 2022-03-21 11:53:30 +01:00
Alfredo Cardigliano
949127cfd4 Rename general_stats.lua -> top.lua in API v2 2022-03-18 10:05:27 +01:00
Alfredo Cardigliano
5e15f44269 Cleanup debug print 2022-03-16 11:32:44 +01:00
Alfredo Cardigliano
ca189ea4fd Always use tstamp as part of the query to avoid full scans (#6422) 2022-03-16 11:23:56 +01:00
Alfredo Cardigliano
873fad2966 Use first_seen instead of tstamp for flow alerts lookups 2022-03-14 18:44:06 +01:00
uccidibuti
f5598decc0 Wrong Alert Default Sort #6339 2022-03-01 17:43:32 +01:00
Alfredo Cardigliano
c5e4ec2217 Fix L7 filters for flow alerts (usa same key used for flows) 2022-03-01 16:34:05 +01:00
Alfredo Cardigliano
6c9dd9f7df Support 'contains' op in alerts 2022-02-22 16:32:20 +01:00
Alfredo Cardigliano
9bd30a049a Do not print nil for empty values 2022-02-22 15:55:50 +01:00
Alfredo Cardigliano
90b7c5fd91 Do not print nil for empty values 2022-02-22 15:25:42 +01:00
Alfredo Cardigliano
d527b88347 Improve alert sql generation for l7 proto 2022-02-17 12:38:53 +01:00
Alfredo Cardigliano
e0d41a0167 Move definition of alert tags and cleanup declarations 2022-02-14 12:55:20 +01:00
Alfredo Cardigliano
bcf3c053ce Rework rest API for alert stats 2022-01-26 10:00:20 +01:00
Alfredo Cardigliano
cc81975441 Add get_top_limit and format_top_alerts to alert_store 2022-01-25 11:04:46 +01:00
Luca Deri
fd559d1859 Added further escape check in flow export 2022-01-24 22:06:59 +01:00
Alfredo Cardigliano
e9d79d9e1a Fix alert query 2022-01-24 17:02:30 +01:00
Alfredo Cardigliano
27090de5c7 Add processed records and performance for alerts. Fix processed stats for flows. 2022-01-21 18:11:33 +01:00
Luca Deri
a5912438f8 Added epoch_begin and epoch_end in /lua/rest/v2/get/flow/alert/list.lua 2022-01-13 21:40:57 +01:00
Alfredo Cardigliano
a3bce393ca Remove duplicated i18n tag fields. Add info tag definition. 2022-01-11 10:48:52 +01:00
Luca
bbcd1d011b Added fix for converting alerts_map with SQLite to a meaningful value
being it stored as BLOB
2022-01-10 12:40:45 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
Alfredo Cardigliano
b242ec2975 Alert details page. Stub functions for label/details functions in alert store. 2021-12-28 16:01:30 +01:00
Simone Mainardi
01256e21ec Fixes parse input errors for the system interface alerts
Addresses #6115
2021-12-24 14:26:59 +01:00
MatteoBiscosi
46c98aa90d Fixes incorrect system interface id used (#6136) 2021-12-15 15:37:48 +01:00
Alfredo Cardigliano
d9fc8b0284 Update locale 2021-11-25 11:43:32 +01:00