Commit graph

158 commits

Author SHA1 Message Date
MatteoBiscosi
aee4e299e4 Fixes host alerts not have vlans id (#5629) 2021-07-06 11:05:59 +02:00
Alfredo Cardigliano
be539cca6e Fix role filter 2021-07-05 19:02:06 +02:00
Simone Mainardi
04db8cc274 Merges acknowledge and label alerts into acknowledge
Addresses #5600
2021-07-05 18:02:56 +02:00
Simone Mainardi
a767ad1e26 Prevents acknowledged alerts from being returned by default 2021-07-02 17:50:14 +02:00
Simone Mainardi
f1083262e3 Implements facilities to label alerts
Implements #5600
2021-07-02 17:25:58 +02:00
Simone Mainardi
96c5e2025d Fixes hardcoded URL 2021-07-02 15:12:03 +02:00
Simone Mainardi
feb65be1ca Implements acknowledged alerts
Implements #5600
2021-07-02 14:58:38 +02:00
MatteoBiscosi
744a5e53c3 Added vlan to each host reference (#5595) 2021-07-02 13:13:00 +02:00
Alfredo Cardigliano
49a1803555 Fix ip/vlan filters on flow alerts 2021-07-02 10:58:34 +02:00
Alfredo Cardigliano
24f9364c36 Handle special cases for engaged alerts with the new filtering engine 2021-07-01 15:37:43 +02:00
Alfredo Cardigliano
0a02f7a88e Cleanup unused function 2021-07-01 14:55:50 +02:00
Alfredo Cardigliano
f3dc40c1c0 Port 'role' filters to the new filtering engine 2021-07-01 14:48:58 +02:00
Alfredo Cardigliano
6827241e13 Defer sql condition generation. Rework handling of special cases of conditions. Fix host/vlan filters. 2021-07-01 12:41:36 +02:00
Alfredo Cardigliano
25aa2c0a9f Engaged alert filtering (wip) 2021-07-01 09:42:47 +02:00
Alfredo Cardigliano
ae912ba460 Add comments 2021-06-30 18:45:13 +02:00
Alfredo Cardigliano
93459b0e67 Add filter on network name to modal 2021-06-30 17:19:43 +02:00
Simone Mainardi
7869d45208 Fixes actions for active monitoring alerts 2021-06-30 17:15:26 +02:00
Alfredo Cardigliano
cac020c537 Use build_where_clause to build where clause 2021-06-30 16:39:08 +02:00
Alfredo Cardigliano
85d0b0cffa Cleanup filters on ip 2021-06-30 16:33:57 +02:00
Alfredo Cardigliano
d92de684cf Rework add_time_filter 2021-06-30 16:27:05 +02:00
Alfredo Cardigliano
612c68f1f3 Remove return beraking loops 2021-06-30 16:09:05 +02:00
Alfredo Cardigliano
1e0c6287a2 Fix role filters 2021-06-30 15:57:26 +02:00
Alfredo Cardigliano
2c6e210552 Missing require. Debug cleanup. 2021-06-30 15:40:32 +02:00
Alfredo Cardigliano
18402ac55d Fix add_role_cli_srv_filter 2021-06-30 15:25:03 +02:00
Simone Mainardi
f14b38bd6b Implements alert sort by duration 2021-06-30 15:34:34 +02:00
Alfredo Cardigliano
d6e33043aa Add support for multiple tags of the same type in the alert filter (backend) 2021-06-30 15:18:47 +02:00
Simone Mainardi
0a6b513710 Implements ability to store/search/filter host alerts by cli/srv
Addresses #5575
2021-06-30 12:58:00 +02:00
Alfredo Cardigliano
1d6a8bfe25 Accept list of filters for alerts 2021-06-30 11:38:26 +02:00
Simone Mainardi
2a7b32056a Unifies attacker/victim roles between flows and hosts 2021-06-30 11:03:00 +02:00
Alfredo Cardigliano
a8d08b2d3e Add support for more filter operators in alerts explorer 2021-06-29 18:25:45 +02:00
Simone Mainardi
972d6610f3 Implements alert filters for local network alerts
Implements #5577
2021-06-29 10:57:39 +02:00
Simone Mainardi
9e0d118c21 SNMP alert fixes and download implementation 2021-06-25 16:58:11 +02:00
Simone Mainardi
0dcdd97a51 Implements CSV download for system alerts 2021-06-25 16:45:53 +02:00
Simone Mainardi
bdd7533bfd Implements missing download for active monitoring alerts 2021-06-25 16:39:18 +02:00
Simone Mainardi
9b3b0b93bf Implements download of user alerts 2021-06-25 16:14:29 +02:00
Simone Mainardi
213e2c96fb Reworks tables layout
Implements #5563
2021-06-25 15:38:38 +02:00
Alfredo Cardigliano
34f546810d Add support for 'subtype' filter dialog 2021-06-25 15:35:58 +02:00
Simone Mainardi
6121eec89c Implements ability to filter/search iface alerts by subject
Addresses #5563
2021-06-24 16:44:23 +02:00
Simone Mainardi
63168f5ff2 Implements 'Subject' column for interface alerts
Addresses #5563
2021-06-24 15:51:17 +02:00
MatteoBiscosi
47497ca666 Fixes behavior anomaly alert key not found 2021-06-23 22:55:08 +02:00
Alfredo Cardigliano
279ed66deb Add alert type filter for all families 2021-06-23 12:53:20 +02:00
Alfredo Cardigliano
27b3d032a7 Add missing require 2021-06-22 16:50:15 +02:00
Alfredo Cardigliano
47451e1757 Fix links to the alerts page with filters 2021-06-22 16:48:31 +02:00
Alfredo Cardigliano
95304bfd54 Fix links with severity filter 2021-06-16 15:57:05 +02:00
Alfredo Cardigliano
1abb8e0c0d Improve filtering on l7 ptoto. Fix returned l7 ID. 2021-06-15 11:39:43 +02:00
Alfredo Cardigliano
6624e382ab HaEnable support for OR in ninde flow explorer. Cleanup operator separator (configured in tag_utils). Cleanup code. 2021-06-14 17:26:50 +02:00
Simone Mainardi
a2f891378d Prints other issues in alerts sorted by score then alphabetically
Addresses #5402
2021-06-11 16:19:08 +02:00
Simone Mainardi
190a43c095 Fixes link for the all alerts page
Addresses #5486
2021-06-11 09:39:16 +02:00
Simone Mainardi
6e5d5ff5eb Disables empty alert pages, reworks historical/engaged links
Addresses #5486
2021-06-11 09:33:09 +02:00
Alfredo Cardigliano
e1b9723809 Add extended description to host alerts 2021-06-10 12:16:03 +02:00