Commit graph

242 commits

Author SHA1 Message Date
Alfredo Cardigliano
342064446d Implement flow alert details page 2021-12-29 17:13:17 +01:00
Alfredo Cardigliano
b242ec2975 Alert details page. Stub functions for label/details functions in alert store. 2021-12-28 16:01:30 +01:00
Simone Mainardi
01256e21ec Fixes parse input errors for the system interface alerts
Addresses #6115
2021-12-24 14:26:59 +01:00
Simone Mainardi
3d79620cd1 Fixes system interface alerts dump to database
Possibly addresses #6115
2021-12-24 11:48:20 +01:00
Simone Mainardi
31242e0a9c Fixes broken active monitoring alerts dump to database
Possibly affects #6115
2021-12-24 11:45:50 +01:00
MatteoBiscosi
5b1f2a88d8 Fixes country not alwais shown in flow alerts (#5934) 2021-12-20 12:42:53 +01:00
MatteoBiscosi
46c98aa90d Fixes incorrect system interface id used (#6136) 2021-12-15 15:37:48 +01:00
Alfredo Cardigliano
cc6014a220 Add toast to warn about deprecated nindex support. Cleanup code. 2021-12-09 16:34:47 +01:00
Alfredo Cardigliano
5ddc037688 Cleanup filterize (keep it generic) 2021-12-02 16:35:34 +01:00
Alfredo Cardigliano
7f4c35f265 Rename field to allow parametric code 2021-12-02 15:52:43 +01:00
MatteoBiscosi
9e12108e87 Fixes alert host search by name not working(#6100) 2021-12-01 16:03:20 +01:00
MatteoBiscosi
a727ba4418 Fixes am alert double interface_id insert error 2021-12-01 11:23:46 +01:00
Alfredo Cardigliano
e5b46d99fd Fix AM alerts insert pt.2 (#6104) 2021-11-30 14:24:49 +01:00
Alfredo Cardigliano
9556ab4f1a Fix AM alerts insert (##6104) 2021-11-30 14:23:41 +01:00
Alfredo Cardigliano
d9fc8b0284 Update locale 2021-11-25 11:43:32 +01:00
Alfredo Cardigliano
30ce408a1d Move score filter caching to alert_store 2021-11-23 18:55:53 +01:00
Alfredo Cardigliano
dfea22e6de Remove exception 2021-11-23 17:58:11 +01:00
Alfredo Cardigliano
178c1f8a80 Fix alert update on acknowledge 2021-11-23 11:23:37 +01:00
Alfredo Cardigliano
f81a45721b Add query stats to alert queries 2021-11-22 11:16:34 +01:00
MatteoBiscosi
47bef64b47 Added country flag to host alerts (#5934) 2021-11-17 16:36:48 +01:00
MatteoBiscosi
2990e0351c Added country flag to flow alerts (#5934) 2021-11-17 16:36:48 +01:00
Simone Mainardi
42950590c8 Implements 'all time' filter using the earliest alerts timestamp
Addresses #6070
2021-11-17 15:22:52 +01:00
Simone Mainardi
dc87dc54ee Fixes invalid subclass method names in all_alert_store 2021-11-17 14:39:12 +01:00
Alfredo Cardigliano
7896c289e6 Fix shortenString on record descr 2021-11-17 09:33:54 +01:00
Simone Mainardi
f335a30a1b Fixes alert store factory always instantiating all 2021-11-16 13:18:34 +01:00
MatteoBiscosi
7cbaa9a754 Added max length to description and other issues (#6073) 2021-11-15 15:19:55 +01:00
Alfredo Cardigliano
5e93019917 Rename src_label/dst_label to cli_name/srv_name for consistency 2021-11-12 16:57:19 +01:00
Alfredo Cardigliano
7c77769f2a Add support for filtering host alerts on hostname. Filter on hostname rather than IP when hostname is available 2021-11-11 19:01:29 +01:00
Alfredo Cardigliano
ad5b7a1250 Add supprot for filtering alerts on hostname. Filter on hostname rather than IP when hostname is available 2021-11-11 18:37:59 +01:00
Simone Mainardi
5fc614fda0 Fixes ellipsising of long host names with VLANs in alerts 2021-11-11 17:44:24 +01:00
Simone Mainardi
37fe090a28 Implements Clickhouse retention using partitioned alert tables
Addresses #6030
2021-11-11 12:28:41 +01:00
Simone Mainardi
a014ce46a6 Fixes cleanup of old alerts when stored in Clickhouse
Addresses #6066
2021-11-10 16:50:44 +01:00
MatteoBiscosi
c103a10450 Fixes wrong check added for clickhouse 2021-11-05 19:26:18 +01:00
MatteoBiscosi
2291fe8076 Fixed single alert delete using clickhouse db 2021-11-05 19:22:19 +01:00
Alfredo Cardigliano
fb2ff7f2a4 Add rowid based on UUID to clickhouse (#6046) 2021-11-05 19:12:36 +01:00
Alfredo Cardigliano
2d846466e1 Fix alerts delete clickhouse (#6046) 2021-11-05 17:35:05 +01:00
Alfredo Cardigliano
fd61b2bb58 Convert datetime to epoch in select_historical with clickhouse (#6046) 2021-11-05 16:57:18 +01:00
Alfredo Cardigliano
b277d36ae7 Fix top_local_network_id_historical with clickhouse (#6046) 2021-11-05 16:21:51 +01:00
Alfredo Cardigliano
f22fb26f7f Fix top_ip_historical with clickhouse (#6046) 2021-11-05 16:18:44 +01:00
Alfredo Cardigliano
98762db37b Fix top_cli_ip_historical and top_srv_ip_historical with clickhouse (#6046) 2021-11-05 15:44:03 +01:00
Alfredo Cardigliano
d2d42ad180 Fix alert count with clickhouse (#6046) 2021-11-05 13:03:56 +01:00
Alfredo Cardigliano
643fdeec68 Fix tstamp in select_historical and count_by_24h_historical 2021-11-05 12:42:57 +01:00
MatteoBiscosi
cf51741407 Added interface ID to where only with clickhouse 2021-11-05 12:13:54 +01:00
MatteoBiscosi
1367f4260c Added interface ID to where clause into alert queries (#6047) 2021-11-05 12:13:54 +01:00
Alfredo Cardigliano
211bce6731 Fix count_by_severity_and_time_historical with clickhouse (#6046) 2021-11-05 11:52:11 +01:00
Luca Deri
13407f6761 Fixes for dumping alerts into ClickHouse 2021-11-04 19:05:50 +01:00
MatteoBiscosi
1b51d3478a Added flow alert context to other issues (#5989) 2021-10-20 21:59:05 +02:00
Simone Mainardi
a406391502 Implement stateful SNMP alert to detect too many MACs on non-trunk
Addresses #5893
2021-10-20 12:21:59 +02:00
Simone Mainardi
d725f5a9b4 Fixes for REST API ts.lua returning 24h data
Addresses #5988
2021-10-19 12:45:56 +02:00
MatteoBiscosi
7b0cc6b125 Added predominant direction to flow alerts (#5989) 2021-10-19 11:50:44 +02:00