Commit graph

71 commits

Author SHA1 Message Date
Simone Mainardi
ae0d1e9543 Implements toggle and filter for acknowledged alerts
Addresses #5600
2021-07-06 17:12:29 +02:00
Alfredo Cardigliano
a3770ec521 Support IP (src or dst) filter on flows 2021-07-06 15:21:45 +02:00
Simone Mainardi
132dccf362 Implements filter to see acknowledged alerts
Addresses #5600
2021-07-06 14:26:25 +02:00
Alfredo Cardigliano
be539cca6e Fix role filter 2021-07-05 19:02:06 +02:00
Simone Mainardi
04db8cc274 Merges acknowledge and label alerts into acknowledge
Addresses #5600
2021-07-05 18:02:56 +02:00
Simone Mainardi
a767ad1e26 Prevents acknowledged alerts from being returned by default 2021-07-02 17:50:14 +02:00
Simone Mainardi
f1083262e3 Implements facilities to label alerts
Implements #5600
2021-07-02 17:25:58 +02:00
Simone Mainardi
96c5e2025d Fixes hardcoded URL 2021-07-02 15:12:03 +02:00
Simone Mainardi
feb65be1ca Implements acknowledged alerts
Implements #5600
2021-07-02 14:58:38 +02:00
Alfredo Cardigliano
49a1803555 Fix ip/vlan filters on flow alerts 2021-07-02 10:58:34 +02:00
Alfredo Cardigliano
24f9364c36 Handle special cases for engaged alerts with the new filtering engine 2021-07-01 15:37:43 +02:00
Alfredo Cardigliano
f3dc40c1c0 Port 'role' filters to the new filtering engine 2021-07-01 14:48:58 +02:00
Alfredo Cardigliano
6827241e13 Defer sql condition generation. Rework handling of special cases of conditions. Fix host/vlan filters. 2021-07-01 12:41:36 +02:00
Alfredo Cardigliano
25aa2c0a9f Engaged alert filtering (wip) 2021-07-01 09:42:47 +02:00
Alfredo Cardigliano
ae912ba460 Add comments 2021-06-30 18:45:13 +02:00
Alfredo Cardigliano
d92de684cf Rework add_time_filter 2021-06-30 16:27:05 +02:00
Alfredo Cardigliano
2c6e210552 Missing require. Debug cleanup. 2021-06-30 15:40:32 +02:00
Simone Mainardi
f14b38bd6b Implements alert sort by duration 2021-06-30 15:34:34 +02:00
Alfredo Cardigliano
d6e33043aa Add support for multiple tags of the same type in the alert filter (backend) 2021-06-30 15:18:47 +02:00
Simone Mainardi
0a6b513710 Implements ability to store/search/filter host alerts by cli/srv
Addresses #5575
2021-06-30 12:58:00 +02:00
Alfredo Cardigliano
1d6a8bfe25 Accept list of filters for alerts 2021-06-30 11:38:26 +02:00
Alfredo Cardigliano
a8d08b2d3e Add support for more filter operators in alerts explorer 2021-06-29 18:25:45 +02:00
Simone Mainardi
9b3b0b93bf Implements download of user alerts 2021-06-25 16:14:29 +02:00
Simone Mainardi
6121eec89c Implements ability to filter/search iface alerts by subject
Addresses #5563
2021-06-24 16:44:23 +02:00
Alfredo Cardigliano
279ed66deb Add alert type filter for all families 2021-06-23 12:53:20 +02:00
Alfredo Cardigliano
6624e382ab HaEnable support for OR in ninde flow explorer. Cleanup operator separator (configured in tag_utils). Cleanup code. 2021-06-14 17:26:50 +02:00
Simone Mainardi
6e5d5ff5eb Disables empty alert pages, reworks historical/engaged links
Addresses #5486
2021-06-11 09:33:09 +02:00
Alfredo Cardigliano
1c50397e5b Add tot count to alert_store get_stats 2021-06-09 08:41:04 +00:00
Matteo Biscosi
a35873d484 Moved new alert dashboards rests into pro version 2021-06-07 19:24:05 +02:00
lucapruneti
33a89e993e
CSV Export (#5445)
* Change host alert function name to json

* Refactored *_alert_store function with format_json, added csv format tohost alert

* Added .vscode directory to gitignore

* Refactor alert_store:to_csv function to single loop format

* Removed no_data value for no records in alert csv download

* Implemented csv export for alerts

* Merge with dev

* Removed row_id alert field to be exported in csv

* Refactored alert/*/list.lua with simple decision value format construct

* Refactored alerts csv export

* Fix removed output test files

* Added alert csv export for subdocuments

* Modified gitignore

* Change MSG values to export in alerts

* Added flow information in alert export

* Added export msg.description for alert
2021-06-04 18:10:26 +02:00
lucapruneti
1338d0956d
Download Alerts Improvements in CSV format (#5442)
* Change host alert function name to json

* Refactored *_alert_store function with format_json, added csv format tohost alert

* Added .vscode directory to gitignore

* Refactor alert_store:to_csv function to single loop format

* Removed no_data value for no records in alert csv download

* Implemented csv export for alerts

* Merge with dev

* Removed row_id alert field to be exported in csv

* Refactored alert/*/list.lua with simple decision value format construct

* Refactored alerts csv export

* Fix removed output test files

* Added alert csv export for subdocuments

* Modified gitignore

* Change MSG values to export in alerts
2021-06-04 10:03:19 +02:00
lucapruneti
fc7efc2a0c
issue_5404_download_alert_format-inconsistent (#5433)
* Change host alert function name to json

* Refactored *_alert_store function with format_json, added csv format tohost alert

* Added .vscode directory to gitignore

* Refactor alert_store:to_csv function to single loop format

* Removed no_data value for no records in alert csv download

* Implemented csv export for alerts

* Merge with dev

* Removed row_id alert field to be exported in csv

* Refactored alert/*/list.lua with simple decision value format construct

* Refactored alerts csv export

* Fix removed output test files

* Added alert csv export for subdocuments

* Modified gitignore
2021-06-04 08:49:31 +02:00
Alfredo Cardigliano
f6f089c69e Add top mac and networks by alert count 2021-06-03 15:12:37 +02:00
Alfredo Cardigliano
5d294f7cab Add get_stats function to comput top alerts, hosts, cli/srv hosts from historical stats 2021-06-01 18:25:40 +02:00
Alfredo Cardigliano
ee7c012926 Handle operators in (view only) tags 2021-06-01 10:53:46 +02:00
Alfredo Cardigliano
cfdf371ab5 Support lt/gt operators in alert severity 2021-06-01 09:59:54 +02:00
Simone Mainardi
08fb295be9 Implements support for roles (attacker/victim) filtering of alerts
Implements #5425
2021-05-31 12:32:56 +02:00
Matteo Biscosi
8d789023c7 Fixed alert views chart error 2021-05-28 12:18:56 +02:00
Simone Mainardi
0657eb6c9f Reworks flow alerts UI, filters, and unifies terminology
Fixes #5331
2021-05-26 15:56:00 +02:00
Alfredo Cardigliano
30e0bd8675 Add ability to filter by alert type (#5292) 2021-05-14 15:23:28 +02:00
Alfredo Cardigliano
064c20db29 Implement support for alert filters using a dialog (WIP) 2021-05-13 19:02:28 +02:00
Alfredo Cardigliano
b784ffa90c Return an empty series when there are no alerts 2021-05-12 11:45:13 +02:00
Alfredo Cardigliano
bd190c22d1 Set record family when it applies 2021-05-11 18:13:48 +02:00
Alfredo Cardigliano
6c9b546383 Improve alert description for some families 2021-05-11 18:11:10 +02:00
Simone Mainardi
53ffd160de Fixes sort by attacker/victim in host page 2021-05-11 14:36:58 +02:00
Alfredo Cardigliano
aea96c3bbc Fix filter on alert_id 2021-05-11 14:06:07 +02:00
Matteo Biscosi
c9b08d52a0 Implemented attacker and victim column
Implements #5310
2021-05-11 12:46:49 +02:00
Alfredo Cardigliano
0f6722629a Rework series removing duplicated code and removing 0 series 2021-05-07 14:56:08 +02:00
Luca Deri
2d62b8ed76 Fix colors in alert graphs
Fixed timepicker
2021-05-07 13:27:40 +02:00
Luca Deri
1a59a9cc80 Updated alarm widget 2021-05-07 11:38:24 +02:00