67 commits

Author	SHA1	Message	Date
Luca Deri	404c95a0c0	Improved SNMP interface roles	2026-03-16 22:22:59 +00:00
Luca Deri	374493e444	Commented Clickhouse files	2026-03-15 12:45:16 +01:00
Alfredo Cardigliano	034d6db866	Add INTERFACE_ROLE to table definition as well	2026-03-13 11:44:11 +01:00
Matteo Biscosi	d881e76473	Added support to Interface role filters	2026-03-12 12:10:14 +00:00
Alfredo Cardigliano	a85212724c	Fix mitre_table_info schema on CH cluster	2026-02-09 10:19:22 +01:00
Alfredo Cardigliano	cb8d44dd5f	Store Exporter Site to historical data	2026-02-03 10:03:37 +01:00
Alfredo Cardigliano	76426e4818	Update clickhouse cluster schema (2)	2026-01-23 09:06:20 +01:00
Alfredo Cardigliano	2b915386ea	Update clickhouse cluster schema	2026-01-23 09:01:12 +01:00
Alfredo Cardigliano	7436a0385b	Fix asset definition on CH cluster	2026-01-13 12:19:46 +01:00
Alfredo Cardigliano	52cfebc7a9	Remove leftover causing slow startup	2025-10-13 10:07:57 +02:00
Luca Deri	931903bd54	Removed pre-nat entries	2025-10-01 15:58:48 +02:00
Luca Deri	215aa1436b	Code cleanup ... Reworked MAC handling in flows	2025-09-26 21:15:01 +02:00
Manuel Ceroni	6d91ba2dd0	Added NDPI TCP fingerprint in historical flows (#9702)	2025-09-26 19:17:45 +02:00
Alfredo Cardigliano	673ad2797b	Fix 'all' alerts view to account also engaged alerts	2025-08-25 16:49:58 +02:00
Alfredo Cardigliano	ba382f7316	Add AS alert entity. Fix AS threshold crossed.	2025-08-25 14:45:22 +02:00
Luca Deri	11358965b0	Added ASN agrgegation table	2025-07-28 12:14:10 +02:00
Alfredo Cardigliano	ed1c0ae14b	Change hourly schema: order by first seen first	2025-07-17 16:56:55 +02:00
GabrieleDeri	e912af1b17	Added peer asn in clickhouse (#9328) ... * Added peer asn in clickhouse * Added peer asn to all versions * Readded en string	2025-07-01 13:09:13 +02:00
Alfredo Cardigliano	a13eb41e81	Replace NULL with default values (CH optimization)	2025-05-19 18:47:53 +02:00
Alfredo Cardigliano	821efd53d0	Cleanup schema (NOT NULL is not required - default)	2025-05-19 17:56:22 +02:00
Alfredo Cardigliano	5f1af930fb	Change flows table schema (order by FIRST_SEEN first)	2025-05-16 18:12:40 +02:00
Matteo Biscosi	fcdc6b7a03	Added packets to hourly flows	2025-05-14 16:23:05 +02:00
Luca Deri	cb03021f4e	Updated DB asset schema ... Fixed URL in host details	2025-03-27 19:36:56 +01:00
Alfredo Cardigliano	b246fe94b0	Cleanup old flow_alerts table schema	2025-03-19 16:00:13 +01:00
Alfredo Cardigliano	97ca40a349	Add ja4 client fingerprint and custom queries	2025-03-12 16:57:10 +01:00
Alfredo Cardigliano	bb9216ba7b	Add QOE_SCORE column	2025-02-25 09:39:05 +01:00
Alfredo Cardigliano	a4b7228a3a	Cleanup CH schema	2024-12-31 10:23:23 +01:00
Matteo Biscosi	a63dec0dcc	Reworked assets table	2024-12-30 12:37:54 +01:00
Alfredo Cardigliano	ae5128c620	Split protocol and alert info from ALERT_JSON: new PROTOCOL_INFO_JSON column	2024-12-05 15:13:16 +01:00
Alfredo Cardigliano	173e0aaca0	Add in-memory tables for all alert families. Add aggregated views for all families.	2024-11-12 09:57:02 +01:00
Alfredo Cardigliano	f412a7dc5e	Add require_attention to all alert families on CH Cluster	2024-11-11 18:30:50 +01:00
Alfredo Cardigliano	2da5925181	Fix all alerts page. Fix require attention results.	2024-11-11 15:59:58 +01:00
Alfredo Cardigliano	f3963c9eb1	Split alert_status (engaged, historical, acknowledged) and require_attention flag	2024-11-11 12:46:25 +01:00
Alfredo Cardigliano	009288bdc2	Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse Cluster	2024-11-08 12:48:46 +01:00
Matteo Biscosi	679ef8edab	Possible fix for asset management not working	2024-11-05 15:51:03 +01:00
Matteo Biscosi	6ab628cab9	Added missing schema to ch cluster	2024-11-05 14:34:42 +01:00
Alfredo Cardigliano	89f59cde5a	Migrate local networks type from 16 to 32 bit	2024-10-29 15:31:37 +01:00
Alfredo Cardigliano	fb30f7592f	Fix schema. Add DOMAIN_NAME.	2024-10-28 11:22:36 +01:00
Alfredo Cardigliano	1eab4beac5	Restore SRC_NETWORK_ID DST_NETWORK_ID data type to UInt16 for the time being	2024-10-25 11:59:17 +02:00
Alfredo Cardigliano	d25e23a599	Remove SRC_NETWORK_ID DST_NETWORK_ID type change from init (to be moved to the startup script)	2024-10-25 11:55:17 +02:00
Alfredo Cardigliano	5fd9b1c1f6	Change SRC_NETWORK_ID DST_NETWORK_ID from UInt16 to UInt32	2024-10-25 11:05:41 +02:00
Alfredo Cardigliano	d9057e8236	Add WLAN_SSID WTP_MAC_ADDRESS to hourly_flows	2024-09-19 12:39:22 +02:00
Alfredo Cardigliano	7b291f5fca	Dump WLAN_SSID and WTP_MAC_ADDRESS in historical flows	2024-09-16 18:31:42 +02:00
GabrieleDeri	12c0d7fa32	Fixed score filter alerts page, updated dist, removed logging (#8648) ... * Fixed score filter alerts page, updated dist, removed logging * Reverted to correct version	2024-08-21 09:25:01 +02:00
GabrieleDeri	438cf9861d	Update db_schema_clickhouse_cluster.sql	2024-08-19 18:13:47 +02:00
DGabri	869fcbf626	Added useful columns in table, removed unnecessary columns	2024-08-19 18:11:40 +02:00
Alfredo Cardigliano	5768dd88d6	Add mitre table and flow/host alerts views on clickhouse cluster	2024-08-19 09:00:41 +02:00
Matteo Biscosi	7e4ff509de	Fixes missing columns to CH cluster	2024-06-24 15:33:56 +02:00
Nicolò Maio	2d150103b7	Add TCP flow connection state (#8210) ... * Add TCP flow connection state (#8140) * Add Major and Minor connection states (#8140) * Remove ZMQ connection state parsing. (#8140) * Update doc with major and minor conn states. (#8140)	2024-02-28 14:45:49 +01:00
Nicolo Maio	c17db2e3b3	Add INTERFACE_ID in hourly_flows table. (#8197)	2024-02-01 12:38:06 +01:00