4594 commits

Author	SHA1	Message	Date
MatteoBiscosi	aee4e299e4	Fixes host alerts not have vlans id (#5629)	2021-07-06 11:05:59 +02:00
Alfredo Cardigliano	be539cca6e	Fix role filter	2021-07-05 19:02:06 +02:00
Simone Mainardi	04db8cc274	Merges acknowledge and label alerts into acknowledge ... Addresses #5600	2021-07-05 18:02:56 +02:00
MatteoBiscosi	9d2139f453	Renamed behavior timeseries due to the change from counter to gauge ts	2021-07-05 15:45:58 +02:00
MatteoBiscosi	1c4bf75aa8	Fixes behavior graphs displaying wrong values	2021-07-05 12:42:06 +02:00
l3wiz	d24f94d14d	Added a modal when try to open external links (Issue #5618)	2021-07-02 19:28:33 +02:00
Simone Mainardi	a767ad1e26	Prevents acknowledged alerts from being returned by default	2021-07-02 17:50:14 +02:00
Simone Mainardi	f1083262e3	Implements facilities to label alerts ... Implements #5600	2021-07-02 17:25:58 +02:00
Alfredo Cardigliano	ca6707c54a	Rename haveAdminPrivileges -> isAdministratorOrPrintErr (use meaningful names)	2021-07-02 16:51:40 +02:00
Simone Mainardi	96c5e2025d	Fixes hardcoded URL	2021-07-02 15:12:03 +02:00
Simone Mainardi	feb65be1ca	Implements acknowledged alerts ... Implements #5600	2021-07-02 14:58:38 +02:00
MatteoBiscosi	744a5e53c3	Added vlan to each host reference (#5595)	2021-07-02 13:13:00 +02:00
MatteoBiscosi	08e4c16375	Removed service/periodicity maps href for unprivileged users #5617	2021-07-02 11:54:39 +02:00
MatteoBiscosi	06b72839dd	Extended url length #5596	2021-07-02 11:54:39 +02:00
Alfredo Cardigliano	49a1803555	Fix ip/vlan filters on flow alerts	2021-07-02 10:58:34 +02:00
MatteoBiscosi	04865c8938	Implements #5596 added external href to suspicious file transfer	2021-07-02 10:39:58 +02:00
Simone Mainardi	e70c16be27	Adds cog icon to configure checks from the flow details page ... Addresses #5606	2021-07-01 17:28:37 +02:00
MatteoBiscosi	fcf4084a03	Fixes #5590 removed table.concat function and changed with tconcat	2021-07-01 16:30:23 +02:00
Alfredo Cardigliano	24f9364c36	Handle special cases for engaged alerts with the new filtering engine	2021-07-01 15:37:43 +02:00
Alfredo Cardigliano	0a02f7a88e	Cleanup unused function	2021-07-01 14:55:50 +02:00
Alfredo Cardigliano	f3dc40c1c0	Port 'role' filters to the new filtering engine	2021-07-01 14:48:58 +02:00
MatteoBiscosi	17cd2efb00	Implements #5587 behavior analysis enabled by the alerts	2021-07-01 13:57:09 +02:00
Alfredo Cardigliano	6827241e13	Defer sql condition generation. Rework handling of special cases of conditions. Fix host/vlan filters.	2021-07-01 12:41:36 +02:00
Alfredo Cardigliano	25aa2c0a9f	Engaged alert filtering (wip)	2021-07-01 09:42:47 +02:00
Alfredo Cardigliano	26868ca62c	Set missing entities in alert definitions	2021-07-01 09:03:02 +02:00
Luca	336f1f3d9f	Adding observationPoint support (WIP)	2021-06-30 20:03:37 +02:00
Alfredo Cardigliano	ae912ba460	Add comments	2021-06-30 18:45:13 +02:00
MatteoBiscosi	b487946452	Fixes #5590 concatenation using function	2021-06-30 18:32:36 +02:00
Alfredo Cardigliano	93459b0e67	Add filter on network name to modal	2021-06-30 17:19:43 +02:00
MatteoBiscosi	a04d1a25bf	Removed concatenation and used the tconcat function	2021-06-30 17:22:19 +02:00
Simone Mainardi	7869d45208	Fixes actions for active monitoring alerts	2021-06-30 17:15:26 +02:00
Alfredo Cardigliano	cac020c537	Use build_where_clause to build where clause	2021-06-30 16:39:08 +02:00
Alfredo Cardigliano	85d0b0cffa	Cleanup filters on ip	2021-06-30 16:33:57 +02:00
Alfredo Cardigliano	d92de684cf	Rework add_time_filter	2021-06-30 16:27:05 +02:00
Alfredo Cardigliano	612c68f1f3	Remove return beraking loops	2021-06-30 16:09:05 +02:00
Alfredo Cardigliano	1e0c6287a2	Fix role filters	2021-06-30 15:57:26 +02:00
Alfredo Cardigliano	2c6e210552	Missing require. Debug cleanup.	2021-06-30 15:40:32 +02:00
Alfredo Cardigliano	b3eace3839	Fix role_cli_srv validation	2021-06-30 15:37:09 +02:00
Alfredo Cardigliano	18402ac55d	Fix add_role_cli_srv_filter	2021-06-30 15:25:03 +02:00
Simone Mainardi	f14b38bd6b	Implements alert sort by duration	2021-06-30 15:34:34 +02:00
Alfredo Cardigliano	d6e33043aa	Add support for multiple tags of the same type in the alert filter (backend)	2021-06-30 15:18:47 +02:00
Simone Mainardi	0a6b513710	Implements ability to store/search/filter host alerts by cli/srv ... Addresses #5575	2021-06-30 12:58:00 +02:00
Alfredo Cardigliano	1d6a8bfe25	Accept list of filters for alerts	2021-06-30 11:38:26 +02:00
MatteoBiscosi	c601031299	Fixes chart labels not correct (#5582 #5583)	2021-06-30 11:42:28 +02:00
Simone Mainardi	2a7b32056a	Unifies attacker/victim roles between flows and hosts	2021-06-30 11:03:00 +02:00
MatteoBiscosi	545d4b8f29	Fixes elephant flow error and copy constructor	2021-06-29 22:10:45 +02:00
Luca	fa5271b4d7	Implemented observationPoint menu support	2021-06-29 21:18:51 +02:00
Simone Mainardi	18cbfc5b3a	Fixes for invalid checks for packet/non-packet interfaces ... Addresses #5519	2021-06-29 18:43:00 +02:00
Alfredo Cardigliano	a8d08b2d3e	Add support for more filter operators in alerts explorer	2021-06-29 18:25:45 +02:00
Simone Mainardi	f48670a557	Prevents loading nEdge-only checks on non-nEdge systems ... Partially addresses #5519	2021-06-29 18:05:47 +02:00