Commit graph

48 commits

Author SHA1 Message Date
Alfredo Cardigliano
e4ff578117 Dedup code for alert rest endpoints 2021-05-06 15:04:02 +02:00
Simone Mainardi
83f0c38937 Massive cleanup of old alerts code 2021-05-03 18:16:46 +02:00
Alfredo Cardigliano
f5138b71ac Sort severity colors in chart 2021-05-03 12:25:47 +02:00
Alfredo Cardigliano
9414a3ab25 Add colors to alert timeseries. Optimize queries by severity. 2021-05-03 12:06:41 +02:00
Alfredo Cardigliano
2173b18ea0 Alert histogram for flows and hosts now includes severity info (wip #5210) 2021-04-30 19:16:00 +02:00
Matteo Biscosi
4b699226c9 Fixes alert download button broken and changed to txt
Implements #5260
2021-04-30 12:38:52 +02:00
Simone Mainardi
5bd58b4109 Implements histogram for engaged alerts 2021-04-28 17:41:33 +02:00
Simone Mainardi
c7082a4647 Implements new alerts database and drilldown
alert store skeleton

Alert database type changes

Implement alert store for host alerts. All alert store skeletons.

Fix class method access

Enable tracing

Implements simple queries for host alerts

Implement flow alert store

Fixes escaping of INSERT queries

Flow alerts database schema fixes

Adds escaping for alert JSON in flows and hosts

Implements queries .select() for alerts store

Adds limit and offset to perform paginated queries

Adds new REST getter for flow alerts

Name changes alert_severity to severity, alert_json to json

Fixes alert message not shown

Implement active monitoring alerts store

Implements sort of queries in the new dataabase

Changes alert_type to alert_id

Implement mac alerts store

Fixes flow alert messages

Implement system alerts store

Implement snmp alert store

Add missing items to the flow alerts

Add missing items to the host alerts

Add missing items to the mac alerts

Implements COUNT aplerts api

Add device_name to snmp alerts

add flow alerts templates

updated gitignore

fix for missing order field

add families defined in `alert_store_schema.sql`

Reworks and simplifies alert store subclasses

Implements REST API to fetch alert timeseries

Fixes date in flow REST api

Host alert json fix

Add get/host/alert/list.lua

Move alert/list.lua to alert/past/list.lua

Add alert/past/list.lua for all alert families

Add entity_id to system table to identify the alert type based on <alert_id, entity_id>

Add missing field

Implements facilities to query engaged alerts via REST

Handle both historical and past alerts in alert/list.lua

Fix count

Update params of select_historical

Implement method to add family-specific filters

Add alert/ts.lua for all alert families

Implements facilities and REST endpoints to delete alerts

Implements ordering of alert queries

Fix add_order_by group_by

Rest API tests update

Tests output update

Remove debug trace

Use alert_id instead of type. Add more flow alert info.

Update http lint

Format obsolete tlv version alerts. Add more host info.

Add row_id to list of alerts

Fix selection of engaged alerts

Add test for mac alerts (bcast domains)

Removes attempt to format alerts as flow alerts

Fixes interface selection for active monitoring

Update test output with rest changes

Add more fields to be ignores

Set alert count to 1 for the time being

add bar timeseries chart

add apexcharts

improvements on timeseries bar chart

registered chart callbakcs

working on alert page

fix for date format

Fixes acrive monitoring REST API

Fixes alignment of grouped alert data

Additional fix for alert histogram

remove useless if

formatting alerts page

fixes on flows alert stats table

rename local networks to device

format host pagie in alert_stats

add tag support for hosts and flow

implemented single delete action

add release modal

Fixes format of threshold cross interface alerts

Fixes wrong increase of dropped alerts

Implements exclusion list for invalid dns queries

Reworks exclusions lists for hosts and flows

Addresses #5212
Addresses #5113

Adds host alert keys in host callbacks definitions

Adds alert ids to flow callbacks

fix for not working button (#5215)

Fixes reported timeseries name

removed any additional button inside chart's toolbar (#5200)

Add tables for interfaces, networks, users to the schema. Skeleton alert_store classes

fixed broken range picker layout in firefox (#5199)

Alert insert fixes

Add more info to network alerts

Add rest endpoint for interface, network, user alerts

Fix endpoint selection in alerts_stats

Unifies columns between engaged and past alerts

Fixes Missing mandatory 'alert_granularity'

Minor fixes for missing alert_severity

Fixes arithmetic on a nil value (field 'last_seen')

Fixes get/system/alert/list.lua

use tstamp for column names (#5221)

Implements host alert formatter

Add alerts_store format_record_common

Use common format_record for am, system alerts

Use common format_record for all alerts

Fixes formatting of alerts of all types

Fixes nil in function 'hostinfo2label'

fixes on disable modal

add pages for network, user and interface endpoint (#5224)

Set alert_entity in all classes

Unifies influxdb alerts into system alerts

Addresses #5224

Unifies process alerts into system alerts

Addresses #5224

Cleanup unused periodicActivityEntity

Unifies category lists alerts into system alerts

Addresses #5224

Aligns new alert enums

Addresses #5224

Fixes alert page links

Fixes insertion of interface alerts

Implement filters for Host alerts

Fixes active monitoring alerts not triggering

Implement filters on flow alerts

Fixes for internal alerts timestamp and subtype

implements disable for the alerts

formatted alert disable label

Add address and device type to mac alert records

fix for delete alert toggle

Fix access to entity_val in alert_unexpected_new_device

add mac address and device type inside table

Fixes for new alert fields not handled

Fixes alert_definitions to handle new fields

Add ip/port to snmp alert records

Implements deletion of stored flow alerts

Add alert_name to all alert records via rest. Fix duration.

fixes for snmp tab

Implements delete of past host alerts

Add name to snmp alert records

fixes on system tab

Fix Date column

fixes link

Update menu

Fixes bad argument #3 to 'format' in snmp alerts

updated interface link

new alerts url for host (#5228)

Fixes sort of engaged alert

Minor cleanup

Fixes data returned for local network alerts

Fix duration for one shot. Note.

Fix duration override

Fixes interface selection for system alerts

Move host alert page

fixes for local network tab

Minor fix

Fix engaged host alerts

fixes on user tab

Fix alert_user_activity message
2021-04-26 19:41:34 +02:00
gabryon99
15e601e797 edit stub REST endpoint (#5151) 2021-04-07 15:29:41 +02:00
Simone Mainardi
a0a4843dc7 Adds REST getter for host alerts
Partially addresses #5153
2021-04-07 11:34:19 +02:00
Simone Mainardi
ac0ff6fb89 Reworks get fingerprint data 2021-03-24 11:42:08 +01:00
Simone Mainardi
0eeb32bf8a Fixes invalid TLS host pagepage
Fixes #5121
2021-03-24 11:33:01 +01:00
gabryon99
be38dfa71c moved map.lua under rest/v1/charts 2021-03-08 11:27:56 +01:00
Luca Deri
c80dc8af00 Implemented traffic ratio in hosts map
Completed hosts map localization
2021-03-05 20:00:08 +01:00
gabryon99
9df8afc6cb refactored hosts map data provider (#5080) 2021-03-04 19:58:10 +01:00
Luca Deri
97d1a12661 Removed debug trace 2021-03-02 18:47:40 +01:00
Luca Deri
b47a801447 JA3 TLS fingerprints are not based on AJAX 2021-03-02 18:44:40 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
gabryon99
35ef4da8d4 fixed pie charts and added spinner for the geomap (#4641) 2020-12-24 16:18:15 +01:00
gabryon99
9d8fded73c improved page layouts and added stats_utils for pie charts (#4653) 2020-11-26 16:56:46 +01:00
gabryon99
1fa3a3d734 collpase dscp stats into other (#4641) 2020-10-30 11:52:02 +01:00
gabryon99
888cbd77c2 collapsed DSCP stats into other (#4641) 2020-10-29 14:23:24 +01:00
Luca Deri
31a33b1b11 Removed MUD implementation obsoleted by the service map
Fixes #4326
Fixes 3499
2020-10-11 16:42:24 +02:00
Alfredo Cardigliano
3b32c3acd4 Update REST examples 2020-08-28 16:41:40 +02:00
Alfredo Cardigliano
0eaf407514 Example fix 2020-08-25 15:27:35 +02:00
Alfredo Cardigliano
ba2e44ddc6 REST endpoints now return specific HTTP codes on failure (fix #4278) 2020-08-20 11:45:17 +02:00
Simone Mainardi
16db3cda67 Reworks REST API to return i18n success/error messages
Implements #4300
2020-08-17 19:18:16 +02:00
Alfredo Cardigliano
da74202e94 Add dscp info to raw flows 2020-07-21 15:07:32 +02:00
Ronald Henderson
356bfcdedc
Added rest script for custom host data with docs and test scripts (#4186)
Co-authored-by: root <root@vortex.rwh.shop>
2020-07-21 08:43:39 +02:00
Alfredo Cardigliano
8b4f1c7e07 Add rest endpoint to get interface dscp stats 2020-07-20 17:35:03 +02:00
Alfredo Cardigliano
9fd37cccea Add rest endpoint to get host dscp stats 2020-07-20 16:35:50 +02:00
Simone Mainardi
aa99b6be61 Implement REST endpoint to get host pool members 2020-07-17 12:55:31 +02:00
Simone Mainardi
31715e65d2 Implements REST endpoint to check host pool members before bind
Implements #4138
2020-07-15 16:02:08 +02:00
Simone Mainardi
06aa7097d6 Implements REST endpoint to get host pools
Implements #4139
2020-07-14 18:04:02 +02:00
Simone Mainardi
9a8b77e0d7 Allows RESTful api custom_data.lua to accept fields without alias 2020-07-10 10:20:28 +02:00
Simone Mainardi
46968ab42f Initial implementation of custom_data.lua host rest endpoint 2020-07-07 15:34:42 +02:00
Alfredo Cardigliano
63dc081b1b Fix host key to name (fix #4049) 2020-06-16 10:37:41 +02:00
Alfredo Cardigliano
d5453fe972 Fix rest/v1/get/host/l7/stats content type 2020-06-09 13:07:55 +02:00
Alfredo Cardigliano
49ac0c498a Comment 2020-05-29 09:14:53 +02:00
Alfredo Cardigliano
522fc65b55 Add rest/v1/get/host/active.lua REST API (#3954) 2020-05-28 19:02:19 +02:00
Simone Mainardi
e2d5497d52 Implement endpoint to list all interfaces of an host
Implements #3955
2020-05-28 18:57:08 +02:00
Alfredo Cardigliano
192a043ae5 Remove iface_ndpi_stats.lua (use the REST API) 2020-05-28 11:21:43 +02:00
Alfredo Cardigliano
9348e51924 Add rest/v1/get/host/l7/stats.lua REST API (#3953) 2020-05-28 10:44:07 +02:00
Alfredo Cardigliano
e888188c64 Return NOT_FOUND if host not found (fix #3994) 2020-05-27 17:45:56 +02:00
Alfredo Cardigliano
e45ae9bf7a Add missing interface select 2020-05-20 13:04:00 +02:00
Alfredo Cardigliano
b266ab9335 Add v1/get/system/stats v1/get/host/mud REST API 2020-05-18 17:46:50 +02:00
Alfredo Cardigliano
5ebd5ad5c1 Add v1/get/interface REST API 2020-05-18 17:15:17 +02:00
Luca Deri
ccf76ca54d Added "real" intefaceId validation
Initial work towards REST API
2020-05-17 20:47:46 +02:00