Commit graph

7713 commits

Author SHA1 Message Date
Matteo Biscosi
63df3c6858 Added l7 exporters timeseries 2024-11-19 15:52:22 +01:00
Alfredo Cardigliano
3785284bd5 Fix getFullLocalNetworkName 2024-11-19 09:54:03 +01:00
Alfredo Cardigliano
a8cb1a3359 Fix network print 2024-11-19 09:46:14 +01:00
Matteo Biscosi
efdd1c8673 Fixes missing invert direction to the exporters l7 timeseries 2024-11-15 11:31:23 +01:00
Matteo Biscosi
d01b790182 Fixes top timeseries not working for influxdb (#8815) 2024-11-14 18:15:39 +01:00
Matteo Biscosi
ed3b24a786 Added top l7 protocols timeseries to exporters 2024-11-14 17:00:52 +01:00
Matteo Biscosi
9dab48aedf Fixes l7 protocol not correctly calculated for exporters 2024-11-14 16:35:10 +01:00
Alfredo Cardigliano
3d5a351508 Fix typo 2024-11-13 16:38:15 +01:00
Matteo Biscosi
310af5f9b2 Added tracing for radius accounting update 2024-11-12 18:41:32 +01:00
Alfredo Cardigliano
2aa46f98ac Implement aggregated page for all alert families 2024-11-12 16:22:06 +01:00
Alfredo Cardigliano
125787909a Add rowid to engaged alerts for all families 2024-11-12 11:53:59 +01:00
Matteo Biscosi
b2a37ea016 Fixes missing protocol mapping (#8805) 2024-11-12 11:07:47 +01:00
Matteo Biscosi
b33cd7f697 Removed duplicated help link (#8799) 2024-11-12 10:26:48 +01:00
Alfredo Cardigliano
6f9d0690c6 Add require_attention to all alert families on SQLite. Cleanup SQLite schema 2024-11-11 18:12:27 +01:00
Alfredo Cardigliano
2da5925181 Fix all alerts page. Fix require attention results. 2024-11-11 15:59:58 +01:00
Alfredo Cardigliano
f3963c9eb1 Split alert_status (engaged, historical, acknowledged) and require_attention flag 2024-11-11 12:46:25 +01:00
Alfredo Cardigliano
6bde30030d Check engaged alerts up to 1 day before to avoid full db scan 2024-11-11 10:50:58 +01:00
Alfredo Cardigliano
959f8b25cb Remove useless condition for engaged alerts on flow alerts 2024-11-11 09:46:49 +01:00
Matteo Biscosi
5a6c75c68a Fixes local_hosts_report missing import 2024-11-09 12:45:15 +01:00
Matteo Biscosi
87a3640870 Moved inactive hosts page to the new back end 2024-11-08 18:18:59 +01:00
Alfredo Cardigliano
7f8fd301aa Show engaged alerts also in the Require Attention tab 2024-11-08 17:10:13 +01:00
Alfredo Cardigliano
04d2649911 Add comment on chart function 2024-11-08 17:00:41 +01:00
Alfredo Cardigliano
299057f119 Add ability to filter on alert status (#8795) 2024-11-08 16:16:56 +01:00
Alfredo Cardigliano
42dc80aa06 Fix tstamp condition to handle engaged alerts 2024-11-08 15:35:41 +01:00
Alfredo Cardigliano
7dedfa1a8c Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse 2024-11-08 12:46:41 +01:00
Alfredo Cardigliano
ac48c01f57 Fix query count in case of no result 2024-11-08 09:52:48 +01:00
Alfredo Cardigliano
64028e3f8b Add/remove engaged alerts from the in-memory db (currently working on SQLite) 2024-11-08 09:07:56 +01:00
Matteo Biscosi
88e9608e13 Added is engaged icon 2024-11-07 17:22:12 +01:00
Alfredo Cardigliano
b235b2412a Add stub for insert/delete engaged 2024-11-07 12:16:28 +01:00
Matteo Biscosi
4729f76ea4 Added possibility to filter by custom fields sent from nprobe 2024-11-07 11:33:13 +01:00
Alfredo Cardigliano
b48c0e0d1d Add schema for in-memory mem_db.engaged_host_alerts table and host_alerts_view aggregated view on SQLite 2024-11-07 10:58:48 +01:00
Alfredo Cardigliano
57fb25a60d Parse ndpi confidence from suricata 2024-11-06 12:22:21 +01:00
Alfredo Cardigliano
3d87347f4c Set flow l7 proto when collecting flows from suricata 2024-11-06 12:06:55 +01:00
Matteo Biscosi
10f2fe880f Added custom field mapping in historical flows 2024-11-06 10:47:03 +01:00
Luca Deri
afff51311d Asset management fixes 2024-11-05 18:32:15 +01:00
Matteo Biscosi
4357f7a39f Added missing %u in format 2024-11-05 16:00:13 +01:00
Matteo Biscosi
9da77c72c4 Fixes nil key in asset_management 2024-11-05 15:58:54 +01:00
Matteo Biscosi
22251351a6 Small change to asset_management 2024-11-05 15:56:15 +01:00
Matteo Biscosi
a6c0628110 Fixes wrong key in asset_management table 2024-11-05 15:55:02 +01:00
Matteo Biscosi
679ef8edab Possible fix for asset management not working 2024-11-05 15:51:03 +01:00
YellowMan
3320160670
Cloned in sqlite db information about inactive macs and hosts (#8797)
* Cloned in sqlite db information about inactive macs and hosts

* minor fix

* minor fix

* removed file
2024-11-05 12:19:53 +01:00
YellowMan
acdad58a88
Missing information added to historical flow (#8790)
* Missing information added to historical flow

* Minor consistency fix

* Fixed hassh fingerprint key

* Fix ssh hassh fingerprint - fixed i18n key consistency
2024-11-05 11:30:24 +01:00
Matteo Biscosi
b438573b2a Fixes timeseries of hosts with resolved names not working (#8787) 2024-11-05 10:07:59 +01:00
Matteo Biscosi
ab48c6ee62 Fixes influxdb timeseries not correctly fixed with steps (#8791) 2024-11-04 17:05:11 +01:00
Matteo Biscosi
7c4ef5a59a Added missing speedtest timeseries (#8637) 2024-11-04 16:23:40 +01:00
Luca Deri
c6612ada61 Remove unused IEs 2024-11-04 08:14:54 +01:00
Alfredo Cardigliano
3da6cfca6a Fix filters on MDNS 2024-10-31 14:30:40 +01:00
Alfredo Cardigliano
dd0201b184 Add filter on DNS query 2024-10-30 17:16:48 +01:00
Alfredo Cardigliano
0eb94fca0b Print DNS answers in historical flow details 2024-10-30 15:38:20 +01:00
Alfredo Cardigliano
961d945e11 Remove dns last_rsp (use last_rsp_arr) 2024-10-30 15:18:22 +01:00