Commit graph

41 commits

Author SHA1 Message Date
Alfredo Cardigliano
7dedfa1a8c Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse 2024-11-08 12:46:41 +01:00
Matteo Biscosi
679ef8edab Possible fix for asset management not working 2024-11-05 15:51:03 +01:00
Matteo Biscosi
20ed95fcb0 Added asset management table 2024-11-05 13:46:57 +01:00
Alfredo Cardigliano
89f59cde5a Migrate local networks type from 16 to 32 bit 2024-10-29 15:31:37 +01:00
Alfredo Cardigliano
fb30f7592f Fix schema. Add DOMAIN_NAME. 2024-10-28 11:22:36 +01:00
Alfredo Cardigliano
1eab4beac5 Restore SRC_NETWORK_ID DST_NETWORK_ID data type to UInt16 for the time being 2024-10-25 11:59:17 +02:00
Alfredo Cardigliano
d25e23a599 Remove SRC_NETWORK_ID DST_NETWORK_ID type change from init (to be moved to the startup script) 2024-10-25 11:55:17 +02:00
Alfredo Cardigliano
5fd9b1c1f6 Change SRC_NETWORK_ID DST_NETWORK_ID from UInt16 to UInt32 2024-10-25 11:05:41 +02:00
Matteo Biscosi
1fe009b9cc Fixes issue with ntopng report page (#8688) 2024-09-30 15:31:39 +02:00
Alfredo Cardigliano
d9057e8236 Add WLAN_SSID WTP_MAC_ADDRESS to hourly_flows 2024-09-19 12:39:22 +02:00
Alfredo Cardigliano
7b291f5fca Dump WLAN_SSID and WTP_MAC_ADDRESS in historical flows 2024-09-16 18:31:42 +02:00
DGabri
869fcbf626 Added useful columns in table, removed unnecessary columns 2024-08-19 18:11:40 +02:00
DGabri
35b1700620 Added documentation for clickhouse tables and added forgotten columns to flow_alerts_view 2024-08-19 18:05:14 +02:00
Alfredo Cardigliano
5768dd88d6 Add mitre table and flow/host alerts views on clickhouse cluster 2024-08-19 09:00:41 +02:00
Alfredo Cardigliano
d944725bbb Optimize selects for left join 2024-08-09 16:04:04 +02:00
Alfredo Cardigliano
1ddc1ab77a Fix left join for flow alerts view in case of no mitre id for the alert 2024-08-09 15:57:27 +02:00
DGabri
b13c3e3361 Removed old flow alert view 2024-08-05 16:18:43 +02:00
DGabri
7b6a12fbc3 Implemented mitre views. Ticket: #8592 2024-08-05 16:12:52 +02:00
Luca Ferretti
7cceb656c0
fixed typo (#8565)
* added netbox documentation

* Update asset_inventory.rst

* added ndpi-protocols ipv6 rules

* updated ipv6 check for custom rule

* fix typo

* implemented mitre_table_info inside database

* fixed typo

* changed tecnique to technique typo

* Update host_alert_scan_detected.lua
2024-07-24 18:23:47 +02:00
Matteo Biscosi
ba8027f103 Updated mitre table 2024-07-24 16:50:58 +02:00
Luca Ferretti
c2c33011b0
Implemented mitre_table_info inside database (#8554)
* added netbox documentation

* Update asset_inventory.rst

* added ndpi-protocols ipv6 rules

* updated ipv6 check for custom rule

* fix typo

* implemented mitre_table_info inside database
2024-07-24 15:50:07 +02:00
Matteo Biscosi
d795bf3474 Added NAT info in clickhouse (#8384) 2024-05-10 10:22:55 -04:00
Nicolò Maio
2d150103b7
Add TCP flow connection state (#8210)
* Add TCP flow connection state (#8140)

* Add Major and Minor connection states (#8140)

* Remove ZMQ connection state parsing. (#8140)

* Update doc with major and minor conn states. (#8140)
2024-02-28 14:45:49 +01:00
Nicolo Maio
c17db2e3b3 Add INTERFACE_ID in hourly_flows table. (#8197) 2024-02-01 12:38:06 +01:00
Alfredo Cardigliano
c0dcf3f83e Fix end of statement in clickhouse schema 2024-01-17 09:36:40 +01:00
Matteo Biscosi
7f26e855b6 Fixes misstype error 2023-11-27 10:27:35 +00:00
Luca Deri
bb61ac57ad SQL fixes 2023-11-27 10:56:15 +01:00
Nicolo Maio
7dc3ec89ec [VS] Rename INFO and REPORT_INFO columns into JSON_INFO and REPORT_JSON_INFO. 2023-11-20 17:55:02 +01:00
Nicolo Maio
34f7a42308 [VS] Add historical reports. (#8015) (#7950) 2023-11-20 17:06:23 +01:00
Alfredo Cardigliano
98504cc1b4 Add SRC_LABEL/DST_LABEL to hourly flows 2023-08-23 10:12:27 +02:00
Alfredo Cardigliano
2e31851f43 Fix all_alerts_view definition 2023-06-22 09:44:21 +02:00
Alfredo Cardigliano
246e5a5142 Add alert_category column 2023-06-20 17:25:54 +02:00
Luca Deri
2d90099c1e Modified SNMP alerts table 2023-06-07 16:13:56 +02:00
Luca Deri
4c66ddebbf Reworked clickhouse aggregated flows table 2023-06-05 12:21:05 +02:00
Luca Deri
2b5027e136 Updated table name 2023-05-19 16:37:13 +02:00
Luca Deri
dba12047e3 Added creation of clickhouse aggregated flows table 2023-05-19 16:17:09 +02:00
Matteo Biscosi
f6ce278e9e Added Historical Flow fields when downloading (#6851) 2023-03-31 10:48:54 +00:00
Alfredo Cardigliano
e4404a291b Fix view drop 2023-01-09 12:44:27 +01:00
Alfredo Cardigliano
039b842ce5 Fix where condition in all_alerts_view 2022-12-27 19:41:32 +01:00
Alfredo Cardigliano
416ca7b7fb Add exporter and interface info to flow alerts schema (#6808) 2022-08-22 15:43:18 +02:00
Alfredo Cardigliano
61244379ea Rename misleading file name (CH schema also includes flows) 2022-07-21 17:47:02 +02:00
Renamed from httpdocs/misc/alert_store_schema_clickhouse.sql (Browse further)