159 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	ef22a8adc4	Fix alert type filter in alerts explorer	2023-06-01 15:09:24 +02:00
Alfredo Cardigliano	c0b6e40596	Fix alert type match with SQLite (TODO support alert_map) (#7465)	2023-05-16 09:35:47 +02:00
Matteo Biscosi	ba350292ae	Fixes missing alerts_map field in alerts (#7411 #7394)	2023-04-19 09:19:10 +00:00
Matteo Biscosi	e1d0f369f7	Removed debug tprint	2023-04-17 15:52:44 +00:00
Matteo Biscosi	f9ef574c5f	Fixes engaged alert rest not working properly (#7399)	2023-04-17 15:50:42 +00:00
Matteo Biscosi	f7d0f174ca	Fixes not working rows number (#7385)	2023-04-11 15:10:14 +00:00
Nicolo Maio	9b1da73e4c	Minor fix. (#6922)	2023-03-23 14:38:00 +00:00
Nicolo Maio	d4c67d4efc	Fix sql op and add comment. (#6922)	2023-03-23 14:32:03 +00:00
Nicolo Maio	fc135e1661	Add filter on 2nd and lower flow risk.(#6922)	2023-03-23 14:08:37 +00:00
Matteo Biscosi	00e25ccd46	Added direct download with clickhouse alerts (#6852)	2023-03-21 11:21:47 +00:00
Alfredo Cardigliano	d6e926e9c9	Improve interface report	2023-02-03 15:26:42 +01:00
Alfredo Cardigliano	cbc7eadbd8	Fix engaged alerts reported in all tab	2023-02-02 11:00:47 +01:00
Alfredo Cardigliano	16748e5f03	Add global top alerts stats	2023-01-20 16:52:05 +01:00
Alfredo Cardigliano	8631013266	Restore check for engaged alerts to be displayed if started before the displayed interval	2023-01-13 18:26:42 +01:00
Alfredo Cardigliano	a9f4463f8e	Add Flow Risk (Bitmap) Filter in alerts (#7077)	2023-01-02 11:15:01 +01:00
Luca Deri	4f1451c021	Handled where clause in historical queries	2022-12-29 21:44:53 +01:00
Luca Deri	587cde6f27	Firxed alert store queries when group_by is used	2022-12-28 21:23:37 +01:00
Luca Deri	d596c5ee16	Improved alert analyser	2022-12-28 18:00:57 +01:00
Alfredo Cardigliano	4feb9ef4d9	Cleanup debug print	2022-12-23 18:57:09 +01:00
Alfredo Cardigliano	bc8fb50ce7	Improve Engaged Time Report in Chart (#7066)	2022-12-23 18:55:52 +01:00
MatteoBiscosi	52c316d214	Removed non standard connotations (#6878)	2022-10-17 15:53:36 +02:00
Alfredo Cardigliano	fa68eadef0	Add supprot for filtering alerts on probe ip and interface (#6809)	2022-08-22 16:39:35 +02:00
Alfredo Cardigliano	8f991db0f3	Show System alerts in interfaces also with SQLite (fix #6498)	2022-08-02 11:20:17 +02:00
MatteoBiscosi	3f214341ea	Added traceback in case of nil score	2022-07-20 13:14:49 +02:00
Alfredo Cardigliano	4413f41b65	Cleanup code for json field lookup	2022-06-17 09:56:50 +02:00
MatteoBiscosi	98f39db18b	Added traffic direction filter to alerts (#6666)	2022-06-14 16:21:40 +02:00
Alfredo Cardigliano	f6cb982355	Fix alert_store housekeeping	2022-05-30 11:43:18 +02:00
Alfredo Cardigliano	21530068a9	Add get_table_name / get_write_table_name to alert store	2022-05-30 11:25:32 +02:00
Alfredo Cardigliano	5b0e59b50c	Fix hostname match in engaged alerts	2022-05-24 15:34:53 +02:00
MatteoBiscosi	344946be8f	Fixes non working info field filtering (#6564)	2022-05-20 16:25:02 +02:00
Alfredo Cardigliano	d248d2a158	Handle IPv4 vs IPv6 columns when writing to the flow alerts table using a view	2022-05-11 16:16:23 +02:00
Alfredo Cardigliano	7025b3dd5b	Fix string to numeric IP conversion in flow alerts	2022-05-11 15:46:39 +02:00
Alfredo Cardigliano	8651e089a1	Handle write operation on flow alerts with clickhouse view	2022-05-09 17:49:48 +02:00
Alfredo Cardigliano	2f0ba125da	Add support for 'write' columns which differ from 'view' columns when building where conditions	2022-05-09 14:37:13 +02:00
Alfredo Cardigliano	740102dc22	Engaged alerts are always active by definition, ignore begin epoch	2022-04-20 16:26:10 +02:00
Alfredo Cardigliano	ea29fc8176	Support hostname@vlan in alert filters	2022-04-19 18:11:17 +02:00
Alfredo Cardigliano	da88d0ca8f	Support match on name/cli_name/srv_name including vlan	2022-04-13 18:50:57 +02:00
Alfredo Cardigliano	673a7cf971	Add alert gateway_unreachable	2022-04-07 19:33:52 +02:00
Alfredo Cardigliano	669d8ee611	Fix l7 filter with Unknown value	2022-03-31 18:26:55 +02:00
Alfredo Cardigliano	e140424716	Add SNMP and Active Monitoring tags to interface alerts	2022-03-28 15:03:36 +02:00
Alfredo Cardigliano	be5bf4e479	Use DB conversion function for timestamps, instead of parsing the date in lua	2022-03-21 11:53:30 +01:00
Alfredo Cardigliano	949127cfd4	Rename general_stats.lua -> top.lua in API v2	2022-03-18 10:05:27 +01:00
Alfredo Cardigliano	5e15f44269	Cleanup debug print	2022-03-16 11:32:44 +01:00
Alfredo Cardigliano	ca189ea4fd	Always use tstamp as part of the query to avoid full scans (#6422)	2022-03-16 11:23:56 +01:00
Alfredo Cardigliano	873fad2966	Use first_seen instead of tstamp for flow alerts lookups	2022-03-14 18:44:06 +01:00
uccidibuti	f5598decc0	Wrong Alert Default Sort #6339	2022-03-01 17:43:32 +01:00
Alfredo Cardigliano	c5e4ec2217	Fix L7 filters for flow alerts (usa same key used for flows)	2022-03-01 16:34:05 +01:00
Alfredo Cardigliano	6c9dd9f7df	Support 'contains' op in alerts	2022-02-22 16:32:20 +01:00
Alfredo Cardigliano	9bd30a049a	Do not print nil for empty values	2022-02-22 15:55:50 +01:00
Alfredo Cardigliano	90b7c5fd91	Do not print nil for empty values	2022-02-22 15:25:42 +01:00