127 commits

Author	SHA1	Message	Date
Simone Mainardi	9e0d118c21	SNMP alert fixes and download implementation	2021-06-25 16:58:11 +02:00
Simone Mainardi	0dcdd97a51	Implements CSV download for system alerts	2021-06-25 16:45:53 +02:00
Simone Mainardi	bdd7533bfd	Implements missing download for active monitoring alerts	2021-06-25 16:39:18 +02:00
Simone Mainardi	9b3b0b93bf	Implements download of user alerts	2021-06-25 16:14:29 +02:00
Simone Mainardi	213e2c96fb	Reworks tables layout ... Implements #5563	2021-06-25 15:38:38 +02:00
Alfredo Cardigliano	34f546810d	Add support for 'subtype' filter dialog	2021-06-25 15:35:58 +02:00
Simone Mainardi	6121eec89c	Implements ability to filter/search iface alerts by subject ... Addresses #5563	2021-06-24 16:44:23 +02:00
Simone Mainardi	63168f5ff2	Implements 'Subject' column for interface alerts ... Addresses #5563	2021-06-24 15:51:17 +02:00
MatteoBiscosi	47497ca666	Fixes behavior anomaly alert key not found	2021-06-23 22:55:08 +02:00
Alfredo Cardigliano	279ed66deb	Add alert type filter for all families	2021-06-23 12:53:20 +02:00
Alfredo Cardigliano	27b3d032a7	Add missing require	2021-06-22 16:50:15 +02:00
Alfredo Cardigliano	47451e1757	Fix links to the alerts page with filters	2021-06-22 16:48:31 +02:00
Alfredo Cardigliano	95304bfd54	Fix links with severity filter	2021-06-16 15:57:05 +02:00
Alfredo Cardigliano	1abb8e0c0d	Improve filtering on l7 ptoto. Fix returned l7 ID.	2021-06-15 11:39:43 +02:00
Alfredo Cardigliano	6624e382ab	HaEnable support for OR in ninde flow explorer. Cleanup operator separator (configured in tag_utils). Cleanup code.	2021-06-14 17:26:50 +02:00
Simone Mainardi	a2f891378d	Prints other issues in alerts sorted by score then alphabetically ... Addresses #5402	2021-06-11 16:19:08 +02:00
Simone Mainardi	190a43c095	Fixes link for the all alerts page ... Addresses #5486	2021-06-11 09:39:16 +02:00
Simone Mainardi	6e5d5ff5eb	Disables empty alert pages, reworks historical/engaged links ... Addresses #5486	2021-06-11 09:33:09 +02:00
Alfredo Cardigliano	e1b9723809	Add extended description to host alerts	2021-06-10 12:16:03 +02:00
Matteo Biscosi	8179d4749a	Added host name to alert select	2021-06-09 11:46:10 +02:00
Alfredo Cardigliano	1c50397e5b	Add tot count to alert_store get_stats	2021-06-09 08:41:04 +00:00
Matteo Biscosi	a35873d484	Moved new alert dashboards rests into pro version	2021-06-07 19:24:05 +02:00
lucapruneti	33a89e993e	CSV Export (#5445) ... * Change host alert function name to json * Refactored *_alert_store function with format_json, added csv format tohost alert * Added .vscode directory to gitignore * Refactor alert_store:to_csv function to single loop format * Removed no_data value for no records in alert csv download * Implemented csv export for alerts * Merge with dev * Removed row_id alert field to be exported in csv * Refactored alert/*/list.lua with simple decision value format construct * Refactored alerts csv export * Fix removed output test files * Added alert csv export for subdocuments * Modified gitignore * Change MSG values to export in alerts * Added flow information in alert export * Added export msg.description for alert	2021-06-04 18:10:26 +02:00
lucapruneti	1338d0956d	Download Alerts Improvements in CSV format (#5442) ... * Change host alert function name to json * Refactored *_alert_store function with format_json, added csv format tohost alert * Added .vscode directory to gitignore * Refactor alert_store:to_csv function to single loop format * Removed no_data value for no records in alert csv download * Implemented csv export for alerts * Merge with dev * Removed row_id alert field to be exported in csv * Refactored alert/*/list.lua with simple decision value format construct * Refactored alerts csv export * Fix removed output test files * Added alert csv export for subdocuments * Modified gitignore * Change MSG values to export in alerts	2021-06-04 10:03:19 +02:00
lucapruneti	fc7efc2a0c	issue_5404_download_alert_format-inconsistent (#5433) ... * Change host alert function name to json * Refactored *_alert_store function with format_json, added csv format tohost alert * Added .vscode directory to gitignore * Refactor alert_store:to_csv function to single loop format * Removed no_data value for no records in alert csv download * Implemented csv export for alerts * Merge with dev * Removed row_id alert field to be exported in csv * Refactored alert/*/list.lua with simple decision value format construct * Refactored alerts csv export * Fix removed output test files * Added alert csv export for subdocuments * Modified gitignore	2021-06-04 08:49:31 +02:00
Matteo Biscosi	a616a8f06f	Changed name value and fixed self nil value	2021-06-03 17:39:13 +02:00
Alfredo Cardigliano	f6f089c69e	Add top mac and networks by alert count	2021-06-03 15:12:37 +02:00
Alfredo Cardigliano	5d294f7cab	Add get_stats function to comput top alerts, hosts, cli/srv hosts from historical stats	2021-06-01 18:25:40 +02:00
Alfredo Cardigliano	ee7c012926	Handle operators in (view only) tags	2021-06-01 10:53:46 +02:00
Alfredo Cardigliano	cfdf371ab5	Support lt/gt operators in alert severity	2021-06-01 09:59:54 +02:00
Simone Mainardi	0f5340e1a3	(C) update	2021-05-31 12:39:02 +02:00
Simone Mainardi	08fb295be9	Implements support for roles (attacker/victim) filtering of alerts ... Implements #5425	2021-05-31 12:32:56 +02:00
Simone Mainardi	9453fca4cb	Reworks and completes attacker/victim for all host alerts ... Addresses #5310	2021-05-31 11:17:03 +02:00
Alfredo Cardigliano	72d6cc5e38	Add hyperlinks to alert numbers (implement #5334)	2021-05-28 15:56:33 +02:00
Matteo Biscosi	8d789023c7	Fixed alert views chart error	2021-05-28 12:18:56 +02:00
Simone Mainardi	0c9404bacc	Removes a debug print	2021-05-27 15:19:05 +02:00
Simone Mainardi	567655ad70	Fixes for active monitoring alerts ... Fixes #5415	2021-05-27 15:18:10 +02:00
Simone Mainardi	0657eb6c9f	Reworks flow alerts UI, filters, and unifies terminology ... Fixes #5331	2021-05-26 15:56:00 +02:00
Alfredo Cardigliano	ba67279074	Fix formatters	2021-05-25 12:57:50 +02:00
Alfredo Cardigliano	a097c85052	Remove attacker2victim/victim2attacker columns. Add icons for attacker/victim. Add has_attacker/has_victim fitlers. (fix #5302)	2021-05-25 12:42:44 +02:00
Alfredo Cardigliano	c3dfe67eb5	Add l7 proto and roles to flow alert filters	2021-05-17 14:23:18 +02:00
Matteo Biscosi	d06cd70c7b	Fixed alert page crashing due to pro import	2021-05-17 12:01:00 +02:00
Alfredo Cardigliano	32585a34d0	Fix query on attacker/victim	2021-05-17 09:51:59 +02:00
Alfredo Cardigliano	c8731f5bfa	Add filter support for host role (attacker/victim)	2021-05-14 19:37:56 +02:00
Alfredo Cardigliano	026571e6a7	Move all render code to datatable-utils. Cleanup attacker/victim rendering.	2021-05-14 19:01:39 +02:00
Alfredo Cardigliano	206f1bb608	Move 'add filter' button to the tags bar. Fix filter dialog for all families (#5292)	2021-05-14 15:53:30 +02:00
Alfredo Cardigliano	30e0bd8675	Add ability to filter by alert type (#5292)	2021-05-14 15:23:28 +02:00
Alfredo Cardigliano	f1c343ed83	Add cli/srv ip/port filters to flow alerts, ip filter to host alerts (#5292)	2021-05-14 11:15:08 +02:00
Alfredo Cardigliano	064c20db29	Implement support for alert filters using a dialog (WIP)	2021-05-13 19:02:28 +02:00
Simone Mainardi	bc6008be28	Reports all alerts inside a flow alert (not jsut the predominant) ... Implements #5316	2021-05-13 15:51:05 +02:00