Commit graph

88 commits

Author SHA1 Message Date
Simone Mainardi
6887b924fe Implements caching of alerts (avoids a sqlite lookup)
Implements #3483
2020-03-05 19:06:39 +01:00
emanuele-f
00b4fe17a6 Implement multitenant alerts support for in-memory alerts 2020-02-06 15:18:50 +01:00
emanuele-f
f2baada758 Initial multitenant alerts support
Now the user allowed networks are honored when retrieving alerts. Non-flow alerts still need to be fixed.
2020-02-05 23:10:37 +01:00
emanuele-f
70b13aeb99 Split query filter and aggregation 2020-02-05 23:10:37 +01:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Alfredo Cardigliano
cb2f37529e Reworked storeFlowAlert (using Lua table instead of many params now) 2019-11-06 10:02:15 +01:00
Alfredo Cardigliano
acdab024da Enqueueing flow alerts to be stored/notified from Lua, removed DB select to notiy alert (using the alert object directly) 2019-11-05 15:53:10 +01:00
Alfredo Cardigliano
280213e148 Enqueueing alerts as soon as they are detected, instead of using 2-steps (#3038) 2019-11-05 11:04:44 +01:00
Alfredo Cardigliano
d10dfc7762 Deferred flow alerts insertion through a redis queue. Removed alerts DB select when printing flow details. 2019-10-31 12:53:23 +01:00
emanuele-f
b3374651ce Merge branch 'alerts_cleanup' into dev 2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
f8443ff03d Disk space reclaim and defrag of alerts db 2019-10-17 12:12:28 +02:00
Simone Mainardi
b3d595653e Initial implementation of lua flow callback scripts and blacklisted alerts
Partially implements #2842
2019-09-16 18:27:46 +02:00
emanuele-f
ee9e5ec9de Unify alerts and alerts notifications format 2019-07-30 18:12:58 +02:00
emanuele-f
c715bb36f3 Implement per-alert-type host counters
Such counters will be used in the future to generate alert timeseries.
Counters are not currently serialized as internally discussed.

Closes #2728
2019-07-19 17:27:23 +02:00
emanuele-f
5444f027ed Remove engaged alerts from sqlite 2019-07-17 16:29:55 +02:00
emanuele-f
a2d1e6eda4 Fix interface alert counters and bugged release 2019-07-12 16:08:26 +02:00
emanuele-f
f73810de6c Implement engaged alerts release during shutdown/startup
This is necessary to sync the C state with the database state after startup
2019-07-12 13:37:56 +02:00
emanuele-f
5e0b8b496e Remove autorelease logic based on periodicity and update database schema 2019-07-12 12:46:21 +02:00
emanuele-f
2df194a282 Implement alert release 2019-06-28 15:06:39 +02:00
emanuele-f
a9d3c78587 Alerts changes
NOTE: database schema changed. Existing alerts will be lost.

- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
Simone Mainardi
ccd83549a3 Aggregates equal stored/flow alerts only if within 5 minutes 2019-06-20 13:00:07 +02:00
Simone Mainardi
527fcd2192 Refactors C++ alerts API to update existing alerts 2019-06-14 11:55:56 +02:00
Simone Mainardi
f3b9aa9fd5 Refactors C++ alerts API to detect existing alerts 2019-06-14 11:37:09 +02:00
Simone Mainardi
e68fc31b5e Removes unsafe sqlite3 queries from Lua 2019-05-15 14:43:22 +02:00
Simone Mainardi
ddd3015db1 Implements alerts mitigation for stored alerts 2019-04-12 16:20:55 +02:00
Simone Mainardi
faf8819a9d Initial work for the alerts mitigation facility 2019-04-09 16:45:12 +02:00
emanuele-f
a486d2c19f Implement host counter of total triggered alerts
Closes #2391
2019-02-20 20:12:44 +01:00
Luca Deri
bedff2c8e2 Updated (C) 2019-01-07 19:28:49 +01:00
Luca Deri
00004494bf Reworked alarms
Added informative message at ntopng startup/shutdown
2018-04-13 17:19:58 +02:00
emanuele-f
bfaf36ba63 Group email notifications to prevent mail flooding 2018-04-10 11:33:40 +02:00
emanuele-f
4492e18926 Generalize engage/release alerts API 2018-04-04 17:25:50 +02:00
emanuele-f
d4bbeb10a2 Generalize alerts external report 2018-03-30 20:36:05 +02:00
emanuele-f
89cb18d29c Release all the engaged alerts when alerts are disabled 2018-03-30 15:57:46 +02:00
emanuele-f
8f27bf8f47 Implement SNMP alerts on port status change 2018-03-29 23:00:43 +02:00
Luca Deri
f0c936c368 Updated (C) to 2018 2018-03-22 21:59:42 +01:00
emanuele-f
0f198dd638 Trigger an informative alert when an host pool is activated/deactivated
Closes #1363
2018-02-22 15:26:30 +01:00
emanuele-f
8ff93579aa Implement informative alert when a new MAC address is observed/re-seen/disappears
Implements #1659
2018-02-21 12:42:01 +01:00
Simone Mainardi
aeeb0fa261 Reworks flow alerts with JSON and extra info 2017-12-13 20:18:39 +01:00
Simone Mainardi
501def6492 Additional alerts code cleanup 2017-08-03 15:11:45 +02:00
Simone Mainardi
d7be830895 Alerts code cleanup 2017-08-03 14:34:31 +02:00
emanuele-f
0e66f642a0 Fix alerts counter bug when alerts are disabled and re-enabled.
Steps to reproduce the original issue:
1) alerts are enabled and counter is positive
2) the user disables the alerts from preferences
3) ntopng is stopped, then restarted
4) the user enables the alerts from preferences, but num_alerts_engaged was 0
5) a release of an alert now makes the counter wrap
2017-05-17 11:47:10 +02:00
emanuele-f
3496fb51c0 Add button to flush all alerts data 2017-05-08 23:31:46 +02:00
Simone Mainardi
9c0f7499e7 Reduces redis traffic for alerts checks 2017-05-03 13:23:28 +02:00
emanuele-f
2c53dda60b Fix slack alerts notifications 2017-05-03 13:10:16 +02:00
Simone Mainardi
0586a814ea Optimizes oldest alerts cleanup 2017-05-03 12:41:36 +02:00
emanuele-f
086b580cdb Modify isAlertEngaged to return existing alert fields 2017-05-03 11:57:04 +02:00
emanuele-f
8537b2cc0a Fix host alert counter 2017-05-02 18:32:46 +02:00
Simone Mainardi
7b13e2e6a1 Adds an engine id to the engaged alerts 2017-04-24 12:22:47 +02:00
Simone Mainardi
3322cfe576 Prevents housekeeping alerts extra redis reads 2017-01-24 10:46:57 +01:00