Simone Mainardi
6887b924fe
Implements caching of alerts (avoids a sqlite lookup)
...
Implements #3483
2020-03-05 19:06:39 +01:00
emanuele-f
00b4fe17a6
Implement multitenant alerts support for in-memory alerts
2020-02-06 15:18:50 +01:00
emanuele-f
f2baada758
Initial multitenant alerts support
...
Now the user allowed networks are honored when retrieving alerts. Non-flow alerts still need to be fixed.
2020-02-05 23:10:37 +01:00
emanuele-f
70b13aeb99
Split query filter and aggregation
2020-02-05 23:10:37 +01:00
Luca Deri
57e6a93065
Improved scheduling algorithm to guarantee minimum service time when number of entries allow
...
Updated (C)
2020-01-06 23:36:36 +01:00
Alfredo Cardigliano
cb2f37529e
Reworked storeFlowAlert (using Lua table instead of many params now)
2019-11-06 10:02:15 +01:00
Alfredo Cardigliano
acdab024da
Enqueueing flow alerts to be stored/notified from Lua, removed DB select to notiy alert (using the alert object directly)
2019-11-05 15:53:10 +01:00
Alfredo Cardigliano
280213e148
Enqueueing alerts as soon as they are detected, instead of using 2-steps ( #3038 )
2019-11-05 11:04:44 +01:00
Alfredo Cardigliano
d10dfc7762
Deferred flow alerts insertion through a redis queue. Removed alerts DB select when printing flow details.
2019-10-31 12:53:23 +01:00
emanuele-f
b3374651ce
Merge branch 'alerts_cleanup' into dev
2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a
Migrate C flow status alerts to Lua user scripts
...
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
f8443ff03d
Disk space reclaim and defrag of alerts db
2019-10-17 12:12:28 +02:00
Simone Mainardi
b3d595653e
Initial implementation of lua flow callback scripts and blacklisted alerts
...
Partially implements #2842
2019-09-16 18:27:46 +02:00
emanuele-f
ee9e5ec9de
Unify alerts and alerts notifications format
2019-07-30 18:12:58 +02:00
emanuele-f
c715bb36f3
Implement per-alert-type host counters
...
Such counters will be used in the future to generate alert timeseries.
Counters are not currently serialized as internally discussed.
Closes #2728
2019-07-19 17:27:23 +02:00
emanuele-f
5444f027ed
Remove engaged alerts from sqlite
2019-07-17 16:29:55 +02:00
emanuele-f
a2d1e6eda4
Fix interface alert counters and bugged release
2019-07-12 16:08:26 +02:00
emanuele-f
f73810de6c
Implement engaged alerts release during shutdown/startup
...
This is necessary to sync the C state with the database state after startup
2019-07-12 13:37:56 +02:00
emanuele-f
5e0b8b496e
Remove autorelease logic based on periodicity and update database schema
2019-07-12 12:46:21 +02:00
emanuele-f
2df194a282
Implement alert release
2019-06-28 15:06:39 +02:00
emanuele-f
a9d3c78587
Alerts changes
...
NOTE: database schema changed. Existing alerts will be lost.
- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
Simone Mainardi
ccd83549a3
Aggregates equal stored/flow alerts only if within 5 minutes
2019-06-20 13:00:07 +02:00
Simone Mainardi
527fcd2192
Refactors C++ alerts API to update existing alerts
2019-06-14 11:55:56 +02:00
Simone Mainardi
f3b9aa9fd5
Refactors C++ alerts API to detect existing alerts
2019-06-14 11:37:09 +02:00
Simone Mainardi
e68fc31b5e
Removes unsafe sqlite3 queries from Lua
2019-05-15 14:43:22 +02:00
Simone Mainardi
ddd3015db1
Implements alerts mitigation for stored alerts
2019-04-12 16:20:55 +02:00
Simone Mainardi
faf8819a9d
Initial work for the alerts mitigation facility
2019-04-09 16:45:12 +02:00
emanuele-f
a486d2c19f
Implement host counter of total triggered alerts
...
Closes #2391
2019-02-20 20:12:44 +01:00
Luca Deri
bedff2c8e2
Updated (C)
2019-01-07 19:28:49 +01:00
Luca Deri
00004494bf
Reworked alarms
...
Added informative message at ntopng startup/shutdown
2018-04-13 17:19:58 +02:00
emanuele-f
bfaf36ba63
Group email notifications to prevent mail flooding
2018-04-10 11:33:40 +02:00
emanuele-f
4492e18926
Generalize engage/release alerts API
2018-04-04 17:25:50 +02:00
emanuele-f
d4bbeb10a2
Generalize alerts external report
2018-03-30 20:36:05 +02:00
emanuele-f
89cb18d29c
Release all the engaged alerts when alerts are disabled
2018-03-30 15:57:46 +02:00
emanuele-f
8f27bf8f47
Implement SNMP alerts on port status change
2018-03-29 23:00:43 +02:00
Luca Deri
f0c936c368
Updated (C) to 2018
2018-03-22 21:59:42 +01:00
emanuele-f
0f198dd638
Trigger an informative alert when an host pool is activated/deactivated
...
Closes #1363
2018-02-22 15:26:30 +01:00
emanuele-f
8ff93579aa
Implement informative alert when a new MAC address is observed/re-seen/disappears
...
Implements #1659
2018-02-21 12:42:01 +01:00
Simone Mainardi
aeeb0fa261
Reworks flow alerts with JSON and extra info
2017-12-13 20:18:39 +01:00
Simone Mainardi
501def6492
Additional alerts code cleanup
2017-08-03 15:11:45 +02:00
Simone Mainardi
d7be830895
Alerts code cleanup
2017-08-03 14:34:31 +02:00
emanuele-f
0e66f642a0
Fix alerts counter bug when alerts are disabled and re-enabled.
...
Steps to reproduce the original issue:
1) alerts are enabled and counter is positive
2) the user disables the alerts from preferences
3) ntopng is stopped, then restarted
4) the user enables the alerts from preferences, but num_alerts_engaged was 0
5) a release of an alert now makes the counter wrap
2017-05-17 11:47:10 +02:00
emanuele-f
3496fb51c0
Add button to flush all alerts data
2017-05-08 23:31:46 +02:00
Simone Mainardi
9c0f7499e7
Reduces redis traffic for alerts checks
2017-05-03 13:23:28 +02:00
emanuele-f
2c53dda60b
Fix slack alerts notifications
2017-05-03 13:10:16 +02:00
Simone Mainardi
0586a814ea
Optimizes oldest alerts cleanup
2017-05-03 12:41:36 +02:00
emanuele-f
086b580cdb
Modify isAlertEngaged to return existing alert fields
2017-05-03 11:57:04 +02:00
emanuele-f
8537b2cc0a
Fix host alert counter
2017-05-02 18:32:46 +02:00
Simone Mainardi
7b13e2e6a1
Adds an engine id to the engaged alerts
2017-04-24 12:22:47 +02:00
Simone Mainardi
3322cfe576
Prevents housekeeping alerts extra redis reads
2017-01-24 10:46:57 +01:00