Commit graph

7347 commits

Author SHA1 Message Date
Alfredo Cardigliano
6bde30030d Check engaged alerts up to 1 day before to avoid full db scan 2024-11-11 10:50:58 +01:00
Alfredo Cardigliano
959f8b25cb Remove useless condition for engaged alerts on flow alerts 2024-11-11 09:46:49 +01:00
Matteo Biscosi
5a6c75c68a Fixes local_hosts_report missing import 2024-11-09 12:45:15 +01:00
Matteo Biscosi
87a3640870 Moved inactive hosts page to the new back end 2024-11-08 18:18:59 +01:00
Alfredo Cardigliano
7f8fd301aa Show engaged alerts also in the Require Attention tab 2024-11-08 17:10:13 +01:00
Alfredo Cardigliano
04d2649911 Add comment on chart function 2024-11-08 17:00:41 +01:00
Alfredo Cardigliano
299057f119 Add ability to filter on alert status (#8795) 2024-11-08 16:16:56 +01:00
Alfredo Cardigliano
42dc80aa06 Fix tstamp condition to handle engaged alerts 2024-11-08 15:35:41 +01:00
Alfredo Cardigliano
7dedfa1a8c Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse 2024-11-08 12:46:41 +01:00
Alfredo Cardigliano
ac48c01f57 Fix query count in case of no result 2024-11-08 09:52:48 +01:00
Alfredo Cardigliano
64028e3f8b Add/remove engaged alerts from the in-memory db (currently working on SQLite) 2024-11-08 09:07:56 +01:00
Matteo Biscosi
88e9608e13 Added is engaged icon 2024-11-07 17:22:12 +01:00
Alfredo Cardigliano
b235b2412a Add stub for insert/delete engaged 2024-11-07 12:16:28 +01:00
Matteo Biscosi
4729f76ea4 Added possibility to filter by custom fields sent from nprobe 2024-11-07 11:33:13 +01:00
Alfredo Cardigliano
b48c0e0d1d Add schema for in-memory mem_db.engaged_host_alerts table and host_alerts_view aggregated view on SQLite 2024-11-07 10:58:48 +01:00
Alfredo Cardigliano
57fb25a60d Parse ndpi confidence from suricata 2024-11-06 12:22:21 +01:00
Alfredo Cardigliano
3d87347f4c Set flow l7 proto when collecting flows from suricata 2024-11-06 12:06:55 +01:00
Matteo Biscosi
10f2fe880f Added custom field mapping in historical flows 2024-11-06 10:47:03 +01:00
Luca Deri
afff51311d Asset management fixes 2024-11-05 18:32:15 +01:00
Matteo Biscosi
4357f7a39f Added missing %u in format 2024-11-05 16:00:13 +01:00
Matteo Biscosi
9da77c72c4 Fixes nil key in asset_management 2024-11-05 15:58:54 +01:00
Matteo Biscosi
22251351a6 Small change to asset_management 2024-11-05 15:56:15 +01:00
Matteo Biscosi
a6c0628110 Fixes wrong key in asset_management table 2024-11-05 15:55:02 +01:00
Matteo Biscosi
679ef8edab Possible fix for asset management not working 2024-11-05 15:51:03 +01:00
YellowMan
3320160670
Cloned in sqlite db information about inactive macs and hosts (#8797)
* Cloned in sqlite db information about inactive macs and hosts

* minor fix

* minor fix

* removed file
2024-11-05 12:19:53 +01:00
YellowMan
acdad58a88
Missing information added to historical flow (#8790)
* Missing information added to historical flow

* Minor consistency fix

* Fixed hassh fingerprint key

* Fix ssh hassh fingerprint - fixed i18n key consistency
2024-11-05 11:30:24 +01:00
Matteo Biscosi
b438573b2a Fixes timeseries of hosts with resolved names not working (#8787) 2024-11-05 10:07:59 +01:00
Matteo Biscosi
ab48c6ee62 Fixes influxdb timeseries not correctly fixed with steps (#8791) 2024-11-04 17:05:11 +01:00
Matteo Biscosi
7c4ef5a59a Added missing speedtest timeseries (#8637) 2024-11-04 16:23:40 +01:00
Luca Deri
c6612ada61 Remove unused IEs 2024-11-04 08:14:54 +01:00
Alfredo Cardigliano
3da6cfca6a Fix filters on MDNS 2024-10-31 14:30:40 +01:00
Alfredo Cardigliano
dd0201b184 Add filter on DNS query 2024-10-30 17:16:48 +01:00
Alfredo Cardigliano
0eb94fca0b Print DNS answers in historical flow details 2024-10-30 15:38:20 +01:00
Alfredo Cardigliano
961d945e11 Remove dns last_rsp (use last_rsp_arr) 2024-10-30 15:18:22 +01:00
Matteo Biscosi
e887ad65a9 Changed snmp polling duration data name 2024-10-30 15:14:40 +01:00
Alfredo Cardigliano
e845c1934a Add filter on DNS answer 2024-10-30 15:03:35 +01:00
Alfredo Cardigliano
046027f859 Handle mac addresses which are already formatted 2024-10-30 12:33:39 +01:00
Alfredo Cardigliano
6d3dc27396 Fix typo 2024-10-30 09:01:59 +01:00
GabrieleDeri
c40baa8b22
Fixed webhook error indexing json field (#8786) 2024-10-29 19:25:00 +01:00
GabrieleDeri
f978581261
Added endpoint to get alerts info from bitmap and alert id (#8785) 2024-10-29 19:18:21 +01:00
Alfredo Cardigliano
89f59cde5a Migrate local networks type from 16 to 32 bit 2024-10-29 15:31:37 +01:00
YellowMan
f2d587ed17
Empty field visualisation in historical flow info details fixed (#8784)
* Fixed missing user agent info in historical flow details

* Fixed empty fields visualizzation in historical flow info details
2024-10-29 14:20:44 +01:00
Matteo Biscosi
a0590678e7 Added polling duration timeseries (#8458) 2024-10-29 13:00:50 +01:00
YellowMan
644ef1ed44
Fixed missing user agent info in historical flow details (#8783) 2024-10-29 11:36:23 +01:00
GabrieleDeri
da3252a565
Fixed JSON formatting in webhook notifications (#8782)
* Moved active hosts page from interface to hosts, improved tooltip

* Fixed missing JSON formatting webhook notifications
2024-10-29 07:36:42 +01:00
Matteo Biscosi
c3f8a468f4 Fixes json still in the webhook alert 2024-10-28 21:49:22 +01:00
Matteo Biscosi
8ee9799865 Fixes json formatting (#8770) 2024-10-28 19:00:36 +01:00
Alfredo Cardigliano
b68e205314 Add top domains custom query 2024-10-28 17:55:18 +01:00
Alfredo Cardigliano
8ce99ce1f0 Add filter on domain name. Fix where injection. 2024-10-28 17:11:46 +01:00
Alfredo Cardigliano
2608f3a63d Cleanup old code 2024-10-28 11:52:28 +01:00