Commit graph

4617 commits

Author SHA1 Message Date
Simone Mainardi
8c6458a054 Removes a debug print 2021-07-08 17:40:59 +02:00
Simone Mainardi
b930737aff Reworks and unifies host labelling for visualization 2021-07-08 17:37:41 +02:00
MatteoBiscosi
92f89917c3 Fixes VLAN Tag is cut when shortening Host Names (#5647) 2021-07-08 12:31:27 +02:00
MatteoBiscosi
b941752b0a Fixes maps saved using mac addresses (#5625) 2021-07-08 12:19:53 +02:00
Simone Mainardi
b117e8a23a Adds new REST API v2/
Addresses #5269
2021-07-08 09:57:46 +02:00
Simone Mainardi
04a5a6ea78 Fixes DGA domains not properly handled over ZMQ
Fixes #5649
2021-07-07 19:20:39 +02:00
MatteoBiscosi
7589447432 Fixes hostVisualization function incorrect behavior (#5632) 2021-07-07 16:50:59 +02:00
Simone Mainardi
9c3e4fc5cb Fixes invalid filter for dropped alerts
Fixes #5631
2021-07-07 16:42:17 +02:00
Simone Mainardi
68f87f6f04 Prevents showing modals for config/restart on unsupported systems
Fixes #5487
2021-07-07 16:12:06 +02:00
MatteoBiscosi
09c33731d0 Implements Observation Point Timeseries (#5644) 2021-07-07 12:45:18 +02:00
Luca Deri
96531ff4c3 Fixed flow interface glitches when handlign flows 2021-07-07 12:23:16 +02:00
MatteoBiscosi
3677b57398 Implement Observation Point Report (#5644) 2021-07-07 11:19:08 +02:00
Simone Mainardi
5c469e469b Fixes wrong labels for flow alerts 2021-07-06 18:31:10 +02:00
Simone Mainardi
c402806d8b Fixes host alerts not always reporting VLANs and names
Fixes  #5629
2021-07-06 18:08:48 +02:00
Alfredo Cardigliano
d501728988 Fix time series with MAC address as key (fix #5626) 2021-07-06 17:47:05 +02:00
Simone Mainardi
38b3c9ebdc Shows acknowledged messages when present
Addresses #5600
2021-07-06 17:32:37 +02:00
Simone Mainardi
ae0d1e9543 Implements toggle and filter for acknowledged alerts
Addresses #5600
2021-07-06 17:12:29 +02:00
Alfredo Cardigliano
471e56a9ef Fix nil access (url) 2021-07-06 16:21:47 +02:00
Alfredo Cardigliano
a3770ec521 Support IP (src or dst) filter on flows 2021-07-06 15:21:45 +02:00
MatteoBiscosi
a6a07b4ecb Fixes alert vlan tags (#5632 #5629) 2021-07-06 15:18:51 +02:00
Simone Mainardi
132dccf362 Implements filter to see acknowledged alerts
Addresses #5600
2021-07-06 14:26:25 +02:00
MatteoBiscosi
44764235e9 Added vlan id to top hosts query (#5632) 2021-07-06 11:49:33 +02:00
MatteoBiscosi
fff44399e6 Shortened host names length (#5623) 2021-07-06 11:20:49 +02:00
MatteoBiscosi
aee4e299e4 Fixes host alerts not have vlans id (#5629) 2021-07-06 11:05:59 +02:00
Alfredo Cardigliano
be539cca6e Fix role filter 2021-07-05 19:02:06 +02:00
Simone Mainardi
04db8cc274 Merges acknowledge and label alerts into acknowledge
Addresses #5600
2021-07-05 18:02:56 +02:00
MatteoBiscosi
9d2139f453 Renamed behavior timeseries due to the change from counter to gauge ts 2021-07-05 15:45:58 +02:00
MatteoBiscosi
1c4bf75aa8 Fixes behavior graphs displaying wrong values 2021-07-05 12:42:06 +02:00
l3wiz
d24f94d14d Added a modal when try to open external links (Issue #5618) 2021-07-02 19:28:33 +02:00
Simone Mainardi
a767ad1e26 Prevents acknowledged alerts from being returned by default 2021-07-02 17:50:14 +02:00
Simone Mainardi
f1083262e3 Implements facilities to label alerts
Implements #5600
2021-07-02 17:25:58 +02:00
Alfredo Cardigliano
ca6707c54a Rename haveAdminPrivileges -> isAdministratorOrPrintErr (use meaningful names) 2021-07-02 16:51:40 +02:00
Simone Mainardi
96c5e2025d Fixes hardcoded URL 2021-07-02 15:12:03 +02:00
Simone Mainardi
feb65be1ca Implements acknowledged alerts
Implements #5600
2021-07-02 14:58:38 +02:00
MatteoBiscosi
744a5e53c3 Added vlan to each host reference (#5595) 2021-07-02 13:13:00 +02:00
MatteoBiscosi
08e4c16375 Removed service/periodicity maps href for unprivileged users #5617 2021-07-02 11:54:39 +02:00
MatteoBiscosi
06b72839dd Extended url length #5596 2021-07-02 11:54:39 +02:00
Alfredo Cardigliano
49a1803555 Fix ip/vlan filters on flow alerts 2021-07-02 10:58:34 +02:00
MatteoBiscosi
04865c8938 Implements #5596 added external href to suspicious file transfer 2021-07-02 10:39:58 +02:00
Simone Mainardi
e70c16be27 Adds cog icon to configure checks from the flow details page
Addresses #5606
2021-07-01 17:28:37 +02:00
MatteoBiscosi
fcf4084a03 Fixes #5590 removed table.concat function and changed with tconcat 2021-07-01 16:30:23 +02:00
Alfredo Cardigliano
24f9364c36 Handle special cases for engaged alerts with the new filtering engine 2021-07-01 15:37:43 +02:00
Alfredo Cardigliano
0a02f7a88e Cleanup unused function 2021-07-01 14:55:50 +02:00
Alfredo Cardigliano
f3dc40c1c0 Port 'role' filters to the new filtering engine 2021-07-01 14:48:58 +02:00
MatteoBiscosi
17cd2efb00 Implements #5587 behavior analysis enabled by the alerts 2021-07-01 13:57:09 +02:00
Alfredo Cardigliano
6827241e13 Defer sql condition generation. Rework handling of special cases of conditions. Fix host/vlan filters. 2021-07-01 12:41:36 +02:00
Alfredo Cardigliano
25aa2c0a9f Engaged alert filtering (wip) 2021-07-01 09:42:47 +02:00
Alfredo Cardigliano
26868ca62c Set missing entities in alert definitions 2021-07-01 09:03:02 +02:00
Luca
336f1f3d9f Adding observationPoint support (WIP) 2021-06-30 20:03:37 +02:00
Alfredo Cardigliano
ae912ba460 Add comments 2021-06-30 18:45:13 +02:00