Commit graph

589 commits

Author SHA1 Message Date
Alfredo Cardigliano
d92de684cf Rework add_time_filter 2021-06-30 16:27:05 +02:00
Alfredo Cardigliano
612c68f1f3 Remove return beraking loops 2021-06-30 16:09:05 +02:00
Alfredo Cardigliano
1e0c6287a2 Fix role filters 2021-06-30 15:57:26 +02:00
Alfredo Cardigliano
2c6e210552 Missing require. Debug cleanup. 2021-06-30 15:40:32 +02:00
Alfredo Cardigliano
18402ac55d Fix add_role_cli_srv_filter 2021-06-30 15:25:03 +02:00
Simone Mainardi
f14b38bd6b Implements alert sort by duration 2021-06-30 15:34:34 +02:00
Alfredo Cardigliano
d6e33043aa Add support for multiple tags of the same type in the alert filter (backend) 2021-06-30 15:18:47 +02:00
Simone Mainardi
0a6b513710 Implements ability to store/search/filter host alerts by cli/srv
Addresses #5575
2021-06-30 12:58:00 +02:00
Alfredo Cardigliano
1d6a8bfe25 Accept list of filters for alerts 2021-06-30 11:38:26 +02:00
Simone Mainardi
2a7b32056a Unifies attacker/victim roles between flows and hosts 2021-06-30 11:03:00 +02:00
Alfredo Cardigliano
a8d08b2d3e Add support for more filter operators in alerts explorer 2021-06-29 18:25:45 +02:00
Simone Mainardi
972d6610f3 Implements alert filters for local network alerts
Implements #5577
2021-06-29 10:57:39 +02:00
Simone Mainardi
9e0d118c21 SNMP alert fixes and download implementation 2021-06-25 16:58:11 +02:00
Simone Mainardi
0dcdd97a51 Implements CSV download for system alerts 2021-06-25 16:45:53 +02:00
Simone Mainardi
bdd7533bfd Implements missing download for active monitoring alerts 2021-06-25 16:39:18 +02:00
Simone Mainardi
9b3b0b93bf Implements download of user alerts 2021-06-25 16:14:29 +02:00
Simone Mainardi
213e2c96fb Reworks tables layout
Implements #5563
2021-06-25 15:38:38 +02:00
Alfredo Cardigliano
34f546810d Add support for 'subtype' filter dialog 2021-06-25 15:35:58 +02:00
Simone Mainardi
6121eec89c Implements ability to filter/search iface alerts by subject
Addresses #5563
2021-06-24 16:44:23 +02:00
Simone Mainardi
63168f5ff2 Implements 'Subject' column for interface alerts
Addresses #5563
2021-06-24 15:51:17 +02:00
MatteoBiscosi
47497ca666 Fixes behavior anomaly alert key not found 2021-06-23 22:55:08 +02:00
Alfredo Cardigliano
279ed66deb Add alert type filter for all families 2021-06-23 12:53:20 +02:00
Alfredo Cardigliano
27b3d032a7 Add missing require 2021-06-22 16:50:15 +02:00
Alfredo Cardigliano
47451e1757 Fix links to the alerts page with filters 2021-06-22 16:48:31 +02:00
Alfredo Cardigliano
95304bfd54 Fix links with severity filter 2021-06-16 15:57:05 +02:00
Alfredo Cardigliano
1abb8e0c0d Improve filtering on l7 ptoto. Fix returned l7 ID. 2021-06-15 11:39:43 +02:00
Alfredo Cardigliano
6624e382ab HaEnable support for OR in ninde flow explorer. Cleanup operator separator (configured in tag_utils). Cleanup code. 2021-06-14 17:26:50 +02:00
Simone Mainardi
a2f891378d Prints other issues in alerts sorted by score then alphabetically
Addresses #5402
2021-06-11 16:19:08 +02:00
Simone Mainardi
190a43c095 Fixes link for the all alerts page
Addresses #5486
2021-06-11 09:39:16 +02:00
Simone Mainardi
6e5d5ff5eb Disables empty alert pages, reworks historical/engaged links
Addresses #5486
2021-06-11 09:33:09 +02:00
Alfredo Cardigliano
e1b9723809 Add extended description to host alerts 2021-06-10 12:16:03 +02:00
Matteo Biscosi
8179d4749a Added host name to alert select 2021-06-09 11:46:10 +02:00
Alfredo Cardigliano
1c50397e5b Add tot count to alert_store get_stats 2021-06-09 08:41:04 +00:00
Matteo Biscosi
a35873d484 Moved new alert dashboards rests into pro version 2021-06-07 19:24:05 +02:00
lucapruneti
33a89e993e
CSV Export (#5445)
* Change host alert function name to json

* Refactored *_alert_store function with format_json, added csv format tohost alert

* Added .vscode directory to gitignore

* Refactor alert_store:to_csv function to single loop format

* Removed no_data value for no records in alert csv download

* Implemented csv export for alerts

* Merge with dev

* Removed row_id alert field to be exported in csv

* Refactored alert/*/list.lua with simple decision value format construct

* Refactored alerts csv export

* Fix removed output test files

* Added alert csv export for subdocuments

* Modified gitignore

* Change MSG values to export in alerts

* Added flow information in alert export

* Added export msg.description for alert
2021-06-04 18:10:26 +02:00
lucapruneti
1338d0956d
Download Alerts Improvements in CSV format (#5442)
* Change host alert function name to json

* Refactored *_alert_store function with format_json, added csv format tohost alert

* Added .vscode directory to gitignore

* Refactor alert_store:to_csv function to single loop format

* Removed no_data value for no records in alert csv download

* Implemented csv export for alerts

* Merge with dev

* Removed row_id alert field to be exported in csv

* Refactored alert/*/list.lua with simple decision value format construct

* Refactored alerts csv export

* Fix removed output test files

* Added alert csv export for subdocuments

* Modified gitignore

* Change MSG values to export in alerts
2021-06-04 10:03:19 +02:00
lucapruneti
fc7efc2a0c
issue_5404_download_alert_format-inconsistent (#5433)
* Change host alert function name to json

* Refactored *_alert_store function with format_json, added csv format tohost alert

* Added .vscode directory to gitignore

* Refactor alert_store:to_csv function to single loop format

* Removed no_data value for no records in alert csv download

* Implemented csv export for alerts

* Merge with dev

* Removed row_id alert field to be exported in csv

* Refactored alert/*/list.lua with simple decision value format construct

* Refactored alerts csv export

* Fix removed output test files

* Added alert csv export for subdocuments

* Modified gitignore
2021-06-04 08:49:31 +02:00
Matteo Biscosi
a616a8f06f Changed name value and fixed self nil value 2021-06-03 17:39:13 +02:00
Alfredo Cardigliano
f6f089c69e Add top mac and networks by alert count 2021-06-03 15:12:37 +02:00
Alfredo Cardigliano
5d294f7cab Add get_stats function to comput top alerts, hosts, cli/srv hosts from historical stats 2021-06-01 18:25:40 +02:00
Alfredo Cardigliano
ee7c012926 Handle operators in (view only) tags 2021-06-01 10:53:46 +02:00
Alfredo Cardigliano
cfdf371ab5 Support lt/gt operators in alert severity 2021-06-01 09:59:54 +02:00
Simone Mainardi
0f5340e1a3 (C) update 2021-05-31 12:39:02 +02:00
Simone Mainardi
08fb295be9 Implements support for roles (attacker/victim) filtering of alerts
Implements #5425
2021-05-31 12:32:56 +02:00
Simone Mainardi
9453fca4cb Reworks and completes attacker/victim for all host alerts
Addresses #5310
2021-05-31 11:17:03 +02:00
Alfredo Cardigliano
72d6cc5e38 Add hyperlinks to alert numbers (implement #5334) 2021-05-28 15:56:33 +02:00
Matteo Biscosi
8d789023c7 Fixed alert views chart error 2021-05-28 12:18:56 +02:00
Simone Mainardi
0c9404bacc Removes a debug print 2021-05-27 15:19:05 +02:00
Simone Mainardi
567655ad70 Fixes for active monitoring alerts
Fixes #5415
2021-05-27 15:18:10 +02:00
Simone Mainardi
0657eb6c9f Reworks flow alerts UI, filters, and unifies terminology
Fixes #5331
2021-05-26 15:56:00 +02:00